OSVDB ID: 5726

Title: libpng Malformed PNG Image Error Handling DoS

Info

Disclosure

Apr 30, 2004

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

libpng contains a flaw that may allow a remote denial of service. The issue is triggered when the library process a malformed PNG image and attempts to use memory it has not allocated for an error message. The application using the libpng library will crash resulting in loss of availability.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

PNG Development Group

libpng

1.0.x
1.2.x

References

Credit

  • Steve Grubb -


Direct URL: http://osvdb.org/5726