Mandrake Linux Security Advisory : libpng (MDKSA-2006:209)
High Nessus Plugin ID 24594
SynopsisThe remote Mandrake Linux host is missing one or more security updates.
DescriptionBuffer overflow in the png_decompress_chunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors related to 'chunk error processing,' possibly involving the 'chunk_name'. (CVE-2006-3334)
It is questionable whether this issue is actually exploitable, but the patch to correct the issue has been included in versions < 1.2.12.
Tavis Ormandy, of the Gentoo Linux Security Auditing Team, discovered a typo in png_set_sPLT() that may cause an application using libpng to read out of bounds, resulting in a crash. (CVE-2006-5793)
Packages have been patched to correct these issues.
SolutionUpdate the affected packages.