libpng contains an overflow condition in the png_decompress_chunk() function in pngrutil.c. The issue is triggered as user-supplied input is not properly sanitized when decompressing chunks, which will result in an integer overflow. This may allow a remote attacker to cause a denial of service or potentially execute arbitrary code.
Classification
Location:
Context Dependent
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Upgrade,
Third-Party Solution
Exploit:
Exploit Private
Disclosure:
Vendor Verified,
Third-party Verified
OSVDB:
Web Related
Solution
Upgrade libpng to version 1.5.9rc01 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. Google Chrome users can upgrade to version 17.0.963.56.
