Libpng 'png _ set_unknown_chunks () 'Function Heap Buffer Overflow Vulnerability

Release date:
Updated on:

Affected Systems:
Libpng <1.5.14beta08
Description:
--------------------------------------------------------------------------------
Bugtraq id: 67345
CVE (CAN) ID: CVE-2013-7353
 
Libpng is a function library used by various applications to parse PNG image formats.
 
Libpng 1.5.14beta08 or earlier, libpng/pngset. the png_set_unknown_chunks function in c has the integer overflow vulnerability. A context-independent attacker can exploit this vulnerability to trigger heap buffer overflow through a specially crafted image, resulting in DOS.

Use the function in libpng to read and write PNG files.

Use libpng to read PNG image pixel data

How to Use libpng to display PNG Images

 
<* Source: Mageia
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Libpng
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://libpng.sourceforge.net/
Http://sourceforge.net/p/libpng/bugs/199/

Libpng details: click here
Libpng: click here

This article permanently updates the link address: