libpng

2007-05-23

Page content

Author: voroskoi
Vulnerable: 1.2.16-1
Unaffected: 1.2.16-2terminus1

A vulnerability has been reported in libpng, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an error in the “png_handle_tRNS” function in pngrutil.c. This can be exploited by tricking an application using the library to process a specially crafted PNG file containing a malformed tRNS chunk.

Bug Tracker URL: http://bugs.frugalware.org/task/2051

CVEs:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2445