exploits , vulnerabilities , articles , Libpng Library Uninitialised Pointer Arrays Memory Corruption Vulnerabilities

Title	Libpng Library Uninitialised Pointer Arrays Memory Corruption Vulnerabilities
Published	2009-02-19-12:00AM
Updated	2009-02-19-12:00AM
Class	Design Error
CVE
Remote	Yes
Local	No
Credit	Tavis Ormandy
Vulnerable	libpng libpng 1.2.34 libpng libpng 1.2.27 beta01 libpng libpng 1.2.27 libpng libpng 1.2.26 libpng libpng 1.2.22 rc1 libpng libpng 1.2.21 libpng libpng 1.2.20 libpng libpng 1.2.19 libpng libpng 1.2.18 libpng libpng 1.2.17 libpng libpng 1.2.16 libpng libpng 1.0.42 libpng libpng 1.0.33 libpng libpng 1.0.32 libpng libpng 1.0.25 libpng libpng 1.0.24 libpng libpng 1.0.18 libpng libpng 1.0.17 libpng libpng 1.0.16 libpng libpng 1.0.15 Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 libpng libpng 1.0.14 Conectiva Linux 7.0 Conectiva Linux 6.0 RedHat Linux 7.3 i386 RedHat Linux 7.2 ia64 RedHat Linux 7.2 i386 RedHat Linux 7.1 i386 RedHat Linux 7.0 i386 RedHat Linux 6.2 i386 libpng libpng 1.0.13 libpng libpng 1.0.12 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Server 3.1 Caldera OpenLinux Workstation 3.1.1 Caldera OpenLinux Workstation 3.1 Debian Linux 3.0 MandrakeSoft Linux Mandrake 8.1 ia64 MandrakeSoft Linux Mandrake 8.1 S.u.S.E. Linux 8.0 S.u.S.E. Linux 7.3 sparc S.u.S.E. Linux 7.3 ppc S.u.S.E. Linux 7.3 libpng libpng 1.0.11 Conectiva Linux 8.0 Conectiva Linux 7.0 Conectiva Linux 6.0 libpng libpng 1.0.10 S.u.S.E. Linux 7.2 libpng libpng 1.0.9 MandrakeSoft Linux Mandrake 8.0 ppc MandrakeSoft Linux Mandrake 8.0 libpng libpng 1.0.8 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Server 3.1 Caldera OpenLinux Workstation 3.1.1 Caldera OpenLinux Workstation 3.1 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Single Network Firewall 7.2 S.u.S.E. Linux 7.1 sparc S.u.S.E. Linux 7.1 ppc S.u.S.E. Linux 7.1 alpha S.u.S.E. Linux 7.1 Ximian GNOME 1.4 libpng libpng 1.0.7 libpng libpng 1.0.6 libpng libpng 1.0.5 Debian Linux 2.2 sparc Debian Linux 2.2 powerpc Debian Linux 2.2 IA32 Debian Linux 2.2 arm Debian Linux 2.2 alpha Debian Linux 2.2 68k MandrakeSoft Corporate Server 1.0.1 MandrakeSoft Linux Mandrake 7.1 libpng libpng 1.0 S.u.S.E. Linux 7.0 sparc S.u.S.E. Linux 7.0 ppc S.u.S.E. Linux 7.0 alpha S.u.S.E. Linux 7.0
Not Vulnerable	libpng libpng 1.2.35 libpng libpng 1.0.43
Code	Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: content@securitydot.net.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-17 HP OpenView Storage Data Protector Multiple Remote Code Execution Vulnerabilities
2009-12-17 iDevSpot iSupport Multiple Cross Site Scripting Vulnerabilities
2009-12-17 GNU Automake Insecure Directory Permissions Vulnerability
2009-12-17 Mozilla Firefox CVE-2009-3979 Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Mozilla Firefox CVE-2009-3981 Remote Memory Corruption Vulnerability
2009-12-17 Drupal Sections Module HTML Injection Vulnerability
2009-12-17 Mozilla Firefox and SeaMonkey Theora Video Library Remote Integer Overflow Vulnerability
2009-12-17 Mozilla Firefox and Sea Monkey Insecure Protocol Location Bar Spoofing Vulnerability
2009-12-17 Mozilla Firefox and Sea Monkey Content Injection Spoofing Vulnerability
2009-12-17 Mozilla Firefox/SeaMonkey GeckoActiveXObject Exception Message COM Object Enumeration Vulnerability