OSVDB ID: 44364

Title: libpng Zero-length Unknown Chunk Processing Uninitialized Memory Access

Info

Disclosure

Apr 12, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Apr 12, 2008

Description

Classification

Disclosure: Vendor Verified

Solution

Upgrade to version 1.2.27beta01 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

Security Tracker: 1019840
CVE ID: 2008-1382 (see also: NVD)
Bugtraq ID: 28770
Secunia Advisory ID: 29678 29792 29957 29992 30009 30157 30174 30402 30486 31882 33137 34106 34152 34388 35074 35258 35302 35386
ISS X-Force ID: 41800
Related OSVDB ID: 44364
VUPEN Advisory: ADV-2008-1225
Vendor Specific News/Changelog Entry: http://libpng.sourceforge.net/Advisory-1.2.26.txt
http://lists.debian.org/debian-security-announce/2009/msg00060.html
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0151
http://wiki.videolan.org/Changelog/0.8.6g
https://lists.ubuntu.com/archives/ubuntu-security-announce/2009-March/000855.html
Other Advisory URL: http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html
http://lists.rpath.com/pipermail/security-announce/2008-April/000346.html
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.541247
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.541247
http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1
http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm
http://www.gentoo.org/security/en/glsa/glsa-200804-15.xml
http://www.gentoo.org/security/en/glsa/glsa-200805-10.xml
http://www.gentoo.org/security/en/glsa/glsa-200812-15.xml
http://www.ocert.org/advisories/ocert-2008-003.html
https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00111.html
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00951.html
Mail List Post: http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html
Vendor Specific Solution URL: http://security.gentoo.org/glsa/glsa-200804-15.xml
Vendor Specific Advisory URL: http://support.apple.com/kb/HT1222
http://support.apple.com/kb/HT3137
http://www.vmware.com/security/advisories/VMSA-2009-0007.html
RedHat RHSA: https://rhn.redhat.com/errata/RHSA-2009-0333.html

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/44364