|
|
Family: Mandrake Local Security Checks --> Category: infos
MDKSA-2004:079: libpng Vulnerability Scan
Vulnerability Scan Summary
Check for the version of the libpng package
Detailed Explanation for this Vulnerability Test
The remote host is missing the patch for the advisory MDKSA-2004:079 (libpng).
Chris Evans discovered numerous vulnerabilities in the libpng graphics library,
including a remotely exploitable stack-based buffer overrun in the
png_handle_tRNS function, dangerous code in png_handle_sBIT, a possible
NULL-pointer crash in png_handle_iCCP (which is also duplicated in multiple
other locations), a theoretical integer overflow in png_read_png, and integer
overflows during progressive reading.
All users are encouraged to upgrade immediately.
Solution : http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2004:079
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
