Debian DSA-571-1 : libpng3 - buffer overflows, integer overflow

This script is Copyright (C) 2004-2013 Tenable Network Security, Inc.


Synopsis :

The remote Debian host is missing a security-related update.

Description :

Several integer overflows have been discovered by its upstream
developers in libpng, a commonly used library to display PNG graphics.
They could be exploited to cause arbitrary code to be executed when a
specially crafted PNG image is processed.

See also :

http://www.debian.org/security/2004/dsa-571

Solution :

Upgrade the libpng3 packages.

For the stable distribution (woody) these problems have been fixed in
version 1.2.1-1.1.woody.9.

Risk factor :

Medium / CVSS Base Score : 5.0
(CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P)

Family: Debian Local Security Checks

Nessus Plugin ID: 15669 (debian_DSA-571.nasl)

Bugtraq ID:

CVE ID: CVE-2004-0599