diff options
| author | dinoex <dinoex@FreeBSD.org> | 2010-06-29 00:18:53 +0800 |
|---|---|---|
| committer | dinoex <dinoex@FreeBSD.org> | 2010-06-29 00:18:53 +0800 |
| commit | 296d6b3abb50a76800ac5b159a5b1ad84341542d (patch) | |
| tree | 2c60c3471a98dd8a991ce4cc3a31d2264c821692 /security/vuxml | |
| parent | 6a3ce4a9ff820e7eabde2569c8a1b2fd6b16ba63 (diff) | |
| download | freebsd-ports-gnome-296d6b3abb50a76800ac5b159a5b1ad84341542d.tar.gz freebsd-ports-gnome-296d6b3abb50a76800ac5b159a5b1ad84341542d.tar.zst freebsd-ports-gnome-296d6b3abb50a76800ac5b159a5b1ad84341542d.zip | |
- graphics/png CVE-2010-1205
Feature safe: yes
Diffstat (limited to 'security/vuxml')
| -rw-r--r-- | security/vuxml/vuln.xml | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index f95c8d374e4f..6f1bf2857a4b 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,43 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="edef3f2f-82cf-11df-bcce-0018f3e2eb82"> + <topic>png -- libpng decompression buffer overflow</topic> + <affects> + <package> + <name>png</name> + <range> + <lt>1.4.3</lt> + </range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The PNG project describes the problem in an advisory:</p> + <blockquote cite="http://www.libpng.org/pub/png/libpng.html"> + <p>Several versions of libpng through 1.4.2 (and through 1.2.43 + in the older series) contain a bug whereby progressive + applications such as web browsers (or the rpng2 demo app included + in libpng) could receive an extra row of image data beyond the + height reported in the header, potentially leading to an + out-of-bounds write to memory (depending on how the application + is written) and the possibility of execution of an attacker's + code with the privileges of the libpng user (including remote + compromise in the case of a libpng-based browser visiting a + hostile web site).</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2010-1205</cvename> + <url>http://www.libpng.org/pub/png/libpng.html</url> + </references> + <dates> + <discovery>2010-03-30</discovery> + <entry>2010-06-28</entry> + </dates> + </vuln> + <vuln vid="66759ce6-7530-11df-9c33-000c29ba66d2"> <topic>moodle -- multiple vulnerabilities</topic> <affects> |