[Fixed]CVE-2008-3964(libpng 1.2.x)

infwonder · **Posted:** Fri Sep 12, 2008 2:10 am

CVE-2008-3964 wrote:

Multiple off-by-one errors in libpng before 1.2.32beta01, and 1.4 before 1.4.0beta34, allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a PNG image with crafted zTXt chunks, related to (1) the png_push_read_zTXt function in pngread.c, and possibly related to (2) pngtest.c.

It looks like libpng is in trouble again, we currently use Slackware's package (ver. 1.2.27). Last time I created a ZENBUILD in order to generate a quick security fixes before new SlackBuild was out. Maybe we can do it again... $:-\$

!8!

infwonder · **Posted:** Mon Oct 27, 2008 2:41 pm

There is another remote DoS found in libpng, the developing team has released version 1.2.33rc02 to fix teh issue:

Secunia.com wrote:

Description:
A vulnerability has been reported in libpng, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to a memory leak error within the "png_handle_tEXt()" function in pngrutil.c. This can be exploited to potentially exhaust all available memory via a specially crafted PNG image.

The vulnerability is reported in version 1.2.32. Other versions may also be affected.

Solution:
Fixed in version 1.2.33rc02.

Provided and/or discovered by:
Reported by the vendor.

Reference:
http://secunia.com/Advisories/32418/

infwonder · **Posted:** Thu Nov 13, 2008 1:25 am

There is yet another issue in libpng again...

According to the release note of libpng 1.2.33rc02:
http://sourceforge.net/project/shownote ... up_id=5624

and the report on SecurityFocus:

SecurityFocus wrote:

The 'libpng' library is prone to a remote denial-of-service vulnerability because it fails to handle malicious PNG files.

Successful exploits may allow remote attackers to cause denial-of-service conditions on computers running the affected library.

This issue affects 'libpng' 1.2.32; other versions may also be affected.

It is now suggested to update the package to 1.2.33rc02 ...

gmg · **Joined:** Sat Aug 05, 2006 9:38 am **Posts:** 4604

libpng-1.2.33, is in the snapshot.

infwonder · **Posted:** Wed Dec 17, 2008 1:01 am

Thank you! $\!D/$

[Fixed]CVE-2008-3964(libpng 1.2.x)

Who is online