glpng library buffer overflow
Published:		11.08.2010
Source:		BUGTRAQ
SecurityVulns ID:		11060
Type:		library
Level:		5/10
Description:		Heap buffer overflow in pngLoadRawF() function.

CVE:

CVE-2010-1519 (Multiple integer overflows in glpng.c in glpng 1.45 allow context-dependent attackers to execute arbitrary code via a crafted PNG image, related to (1) the pngLoadRawF function and (2) the pngLoadF function, leading to heap-based buffer overflows.)

Original document

SECUNIA, Secunia Research: glpng PNG Processing Two Integer Overflow Vulnerabilities (11.08.2010)

Discuss:

Read or add your comments to this news (0 comments)