exploits , vulnerabilities , articles , Libpng Library Unknown Chunk Handler Vulnerability

Title	Libpng Library Unknown Chunk Handler Vulnerability
Published	2008-04-14-12:00AM
Updated	2008-04-18-12:27AM
Class	Design Error
CVE	CVE-2008-1382
Remote	Yes
Local	No
Credit	Tavis Ormandy
Vulnerable	libpng libpng3 1.2.13 Slackware Linux 11.0 libpng libpng3 1.2.12 Slackware Linux 11.0 libpng libpng3 1.2.11 libpng libpng3 1.2.10 libpng libpng3 1.2.8 Slackware Linux 10.2 Slackware Linux 10.1 Slackware Linux 10.1 Trustix Secure Linux 3.0.5 Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 libpng libpng3 1.2.7 Trustix Secure Enterprise Linux 2.0 libpng libpng3 1.2.6 rc2 libpng libpng3 1.2.6 rc1 libpng libpng3 1.2.6 libpng libpng3 1.2.5 Gentoo Linux 1.4 _rc1 Gentoo Linux 1.4 _rc1 Gentoo Linux 1.2 Gentoo Linux 1.2 MandrakeSoft Linux Mandrake 10.0 AMD64 MandrakeSoft Linux Mandrake 10.0 AMD64 MandrakeSoft Linux Mandrake 10.0 MandrakeSoft Linux Mandrake 10.0 MandrakeSoft Linux Mandrake 9.2 amd64 MandrakeSoft Linux Mandrake 9.2 amd64 MandrakeSoft Linux Mandrake 9.2 MandrakeSoft Linux Mandrake 9.2 MandrakeSoft Linux Mandrake 9.1 ppc MandrakeSoft Linux Mandrake 9.1 ppc MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Linux Mandrake 9.1 RedHat Fedora Core1 Slackware Linux 10.0 Slackware Linux 9.1 Slackware Linux 9.1 Slackware Linux 9.0 Slackware Linux 9.0 Slackware Linux current Slackware Linux current Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 Ubuntu Ubuntu Linux 4.1 ia32 libpng libpng3 1.2.4 Conectiva Linux 8.0 MandrakeSoft Corporate Server 2.1 x86_64 MandrakeSoft Corporate Server 2.1 MandrakeSoft Linux Mandrake 9.0 MandrakeSoft Linux Mandrake 8.2 ppc MandrakeSoft Linux Mandrake 8.2 MandrakeSoft Multi Network Firewall 2.0 S.u.S.E. Linux 8.1 libpng libpng3 1.2.3 libpng libpng3 1.2.2 RedHat Linux 8.0 i386 libpng libpng3 1.2.1 Debian Linux 3.0 Debian Linux 3.0 MandrakeSoft Linux Mandrake 8.2 ppc MandrakeSoft Linux Mandrake 8.2 MandrakeSoft Linux Mandrake 8.2 Slackware Linux 8.1 libpng libpng3 1.2 .0 Conectiva Linux 8.0 libpng libpng 1.4 beta19 libpng libpng 1.4 beta01 libpng libpng 1.2.26 libpng libpng 1.0.32 libpng libpng 1.0.25 libpng libpng 1.0.24 libpng libpng 1.0.18 libpng libpng 1.0.17 libpng libpng 1.0.16 libpng libpng 1.0.15 Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 libpng libpng 1.0.14 Conectiva Linux 7.0 Conectiva Linux 6.0 RedHat Linux 7.3 i386 RedHat Linux 7.2 ia64 RedHat Linux 7.2 i386 RedHat Linux 7.1 i386 RedHat Linux 7.0 i386 RedHat Linux 6.2 i386 libpng libpng 1.0.13 libpng libpng 1.0.12 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Server 3.1 Caldera OpenLinux Workstation 3.1.1 Caldera OpenLinux Workstation 3.1 Debian Linux 3.0 MandrakeSoft Linux Mandrake 8.1 ia64 MandrakeSoft Linux Mandrake 8.1 S.u.S.E. Linux 8.0 S.u.S.E. Linux 7.3 sparc S.u.S.E. Linux 7.3 ppc S.u.S.E. Linux 7.3 libpng libpng 1.0.11 Conectiva Linux 8.0 Conectiva Linux 7.0 Conectiva Linux 6.0 libpng libpng 1.0.10 S.u.S.E. Linux 7.2 libpng libpng 1.0.9 MandrakeSoft Linux Mandrake 8.0 ppc MandrakeSoft Linux Mandrake 8.0 libpng libpng 1.0.8 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Server 3.1 Caldera OpenLinux Workstation 3.1.1 Caldera OpenLinux Workstation 3.1 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Single Network Firewall 7.2 S.u.S.E. Linux 7.1 sparc S.u.S.E. Linux 7.1 ppc S.u.S.E. Linux 7.1 alpha S.u.S.E. Linux 7.1 Ximian GNOME 1.4 libpng libpng 1.0.7 libpng libpng 1.0.6 ImageMagick ImageMagick 6.4 4 ImageMagick ImageMagick 6.3.4 ImageMagick ImageMagick 6.2.9 ImageMagick ImageMagick 6.2.8 ImageMagick ImageMagick 6.2.7 ImageMagick ImageMagick 6.2.6 ImageMagick ImageMagick 6.2.5 ImageMagick ImageMagick 6.3.59 ImageMagick ImageMagick 6.3.510 ImageMagick ImageMagick 6.3.36 ImageMagick ImageMagick 6.3.35 ImageMagick ImageMagick 6.3.33 ImageMagick ImageMagick 6.3.2 ImageMagick ImageMagick 6.3.1 ImageMagick ImageMagick 6.2.9.2 ImageMagick ImageMagick 6.2.9.2 ImageMagick ImageMagick 6.2.9 Gentoo Linux
Not Vulnerable	libpng libpng 1.2.27 beta01 libpng libpng 1.2.27 libpng libpng 1.0.33
Code	Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: content@securitydot.net.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability
2009-12-15 PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
2009-12-15 PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
2009-12-15 IBM DB2 prior to 9.5 Fix Pack 5 Multiple Unspecified Security Vulnerabilities
2009-12-15 Sun Ray Server Software Desktop Session Handling Local Security Bypass Vulnerability
2009-12-15 Mozilla Firefox Sage Extension RSS Feeds Cross Domain Scripting Vulnerability
2009-12-15 Adobe Reader and Acrobat (CVE-2009-4324) Remote Code Execution Vulnerability
2009-12-14 Microsoft Protected Extensible Authentication Protocol Authentication Bypass Vulnerability
2009-12-14 Google Chrome DNS Pre-Fetching Proxy Cache Information Disclosure Vulnerability
2009-12-14 Oracle E-Business Suite Multiple Remote Vulnerabilities