[ GLSA 200607-06 ] libpng: Buffer overflow

[GLSA]

Gentoo Linux Security Advisory

Title: libpng: Buffer overflow (GLSA 200607-06)
Severity: normal
Exploitable: remote
Date: July 19, 2006
Bug(s): #138433, #138672
ID: 200607-06

Synopsis

A buffer overflow has been found in the libpng library that could lead to the execution of arbitrary code.

Background

libpng is an open, extensible image format library, with lossless compression.

Affected Packages

Package: media-libs/libpng
Vulnerable: < 1.2.12
Unaffected: >= 1.2.12
Architectures: All supported architectures

Package: app-emulation/emul-linux-x86-baselibs
Vulnerable: < 2.5.1
Unaffected: >= 2.5.1
Architectures: amd64


Description

In pngrutil.c, the function png_decompress_chunk() allocates insufficient space for an error message, potentially overwriting stack data, leading to a buffer overflow.

Impact

By enticing a user to load a maliciously crafted PNG image, an attacker could execute arbitrary code with the rights of the user, or crash the application using the libpng library, such as the emul-linux-x86-baselibs.

Workaround

There is no known workaround at this time.

Resolution

All libpng users should upgrade to the latest version: