| Package | Affected versions | Patched versions |
|---|---|---|
| libpng | = 1.0.0= 1.0.1= 1.0.10= 1.0.11= 1.0.12= 1.0.13= 1.0.14= 1.0.15= 1.0.16= 1.0.17= 1.0.18= 1.0.19= 1.0.2= 1.0.20= 1.0.21= 1.0.22= 1.0.23= 1.0.24= 1.0.25= 1.0.26= 1.0.27= 1.0.28= 1.0.29= 1.0.3= 1.0.30= 1.0.31= 1.0.32= 1.0.33= 1.0.34= 1.0.35= 1.0.37= 1.0.38= 1.0.39= 1.0.40= 1.0.41= 1.0.42= 1.0.43= 1.0.44= 1.0.45= 1.0.46= 1.0.47= 1.0.48= 1.0.5= 1.0.50= 1.0.51= 1.0.52= 1.0.53= 1.0.54= 1.0.55= 1.0.56= 1.0.57= 1.0.58= 1.0.6= 1.0.7= 1.0.8= 1.0.9= 1.2.0= 1.2.1= 1.2.10= 1.2.11= 1.2.12= 1.2.13= 1.2.14= 1.2.15= 1.2.16= 1.2.17= 1.2.18= 1.2.19= 1.2.2= 1.2.20= 1.2.21= 1.2.22= 1.2.23= 1.2.24= 1.2.25= 1.2.26= 1.2.27= 1.2.28= 1.2.29= 1.2.3= 1.2.30= 1.2.31= 1.2.32= 1.2.33= 1.2.34= 1.2.35= 1.2.36= 1.2.37= 1.2.38= 1.2.39= 1.2.4= 1.2.40= 1.2.41= 1.2.42= 1.2.43= 1.2.44= 1.2.45= 1.2.46= 1.2.47= 1.2.48= 1.2.5= 1.2.6= 1.2.7= 1.2.8= 1.2.9= 1.4.0= 1.4.1= 1.4.10= 1.4.2= 1.4.3= 1.4.4= 1.4.5= 1.4.6= 1.4.7= 1.4.8= 1.4.9= 1.5.0= 1.5.1= 1.5.10= 1.5.2= 1.5.3= 1.5.4= 1.5.5= 1.5.6= 1.5.7= 1.5.8= 1.5.9 |
The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocation failure that is not properly handled, leading to a heap-based buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free