| Package | Affected versions | Patched versions |
|---|---|---|
| libpng | ≥ 1.1.1, < 1.2.54≥ 1.3.0, < 1.4.17≥ 1.5.0, < 1.5.24≥ 1.6.0, < 1.6.19< 1.0.64 | 1.2.541.4.171.5.241.6.191.0.64 |
| jdk | = 1.6.0= 1.7.0= 1.8.0 | |
| jre | = 1.6.0= 1.7.0= 1.8.0 | |
| satellite | = 5.6= 5.7 |
Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free