Title: Libpng Library 'png_push_read_zTXt()' Off-By-One Denial of Service Vulnerability
Severity: MODERATE
Description:
The 'libpng' library is a PNG reference library.
The library is prone to a remote denial-of-service vulnerability because it fails to handle malicious PNG files. Specifically, this vulnerability resides in the 'png_push_read_zTXt()' function of the 'pngread.c' file. An off-by-one error is triggered when the library tries to process a PNG file that contains malformed 'zTXt' chunks.
Successful exploits may allow remote attackers to cause denial-of-service conditions on computers running the affected library.
This issue affects 'libpng' 1.2.30beta04 and 1.2.31; other versions may also be affected.
Affected Products:
- Gentoo Linux
- MandrakeSoft Corporate Server 3.0.0
- MandrakeSoft Corporate Server 3.0.0 x86_64
- MandrakeSoft Corporate Server 4.0
- MandrakeSoft Corporate Server 4.0.0 x86_64
- MandrakeSoft Linux Mandrake 2008.0
- MandrakeSoft Linux Mandrake 2008.0 x86_64
- MandrakeSoft Linux Mandrake 2008.1
- MandrakeSoft Linux Mandrake 2008.1 x86_64
- MandrakeSoft Linux Mandrake 2009.0
- MandrakeSoft Linux Mandrake 2009.0 x86_64
- MandrakeSoft Multi Network Firewall 2.0.0
- Ubuntu Ubuntu Linux 6.06 LTS amd64
- Ubuntu Ubuntu Linux 6.06 LTS i386
- Ubuntu Ubuntu Linux 6.06 LTS powerpc
- Ubuntu Ubuntu Linux 6.06 LTS sparc
- Ubuntu Ubuntu Linux 7.10 amd64
- Ubuntu Ubuntu Linux 7.10 i386
- Ubuntu Ubuntu Linux 7.10 lpia
- Ubuntu Ubuntu Linux 7.10 powerpc
- Ubuntu Ubuntu Linux 7.10 sparc
- Ubuntu Ubuntu Linux 8.04 LTS amd64
- Ubuntu Ubuntu Linux 8.04 LTS i386
- Ubuntu Ubuntu Linux 8.04 LTS lpia
- Ubuntu Ubuntu Linux 8.04 LTS powerpc
- Ubuntu Ubuntu Linux 8.04 LTS sparc
- Ubuntu Ubuntu Linux 8.10 amd64
- Ubuntu Ubuntu Linux 8.10 i386
- Ubuntu Ubuntu Linux 8.10 lpia
- Ubuntu Ubuntu Linux 8.10 powerpc
- Ubuntu Ubuntu Linux 8.10 sparc
- libpng libpng3 1.2.30 beta04
- libpng libpng3 1.2.31
References:
- US-CERT: Vulnerability Note VU#889484 libpng off-by-one vulnerability
- libpng: [ 2095669 ] Off-by-one error in png_push_read_zTXt
- libpng: libpng Homepage
- libpng: libpng Release Name: 1.2.32beta01
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
