Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

SeaMonkey 2.x < 2.7.2 'png_decompress_chunk' Integer Overflow

High

Synopsis

The remote host has a web browser installed that is affected by an integer overflow vulnerability.

Description

Versions of SeaMonkey 2.x earlier than 2.7.2 are potentially affected by an integer overflow vulnerability in 'libpng', a library used by this application. When decompressing certain PNG image files, this error can allow a heap-based buffer overflow which can crash the application or potentially allow code execution.

Solution

Upgrade to SeaMonkey 2.7.2 or later.