SunOS 5.10_x86: libpng Patch.
Date this patch was last updated by Sun : Jul/17/17

New libpng packages are available for Slackware 10.1 and 10.2 that were left out of the last batch of updates.  These fix the same security problems as the other 1.2.23 upgrades.

More details about these issues may be found in the Common Vulnerabilities and Exposures (CVE) database:
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5266   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5267   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5268   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5269

The remote host is affected by the vulnerability described in GLSA-200711-08 (libpng: Multiple Denials of Service)

    An off-by-one error when handling ICC profile chunks in the     png_set_iCCP() function was discovered (CVE-2007-5266). George Cook and     Jeff Phillips reported several errors in pngrtran.c, the use of logical     instead of a bitwise functions and incorrect comparisons     (CVE-2007-5268). Tavis Ormandy reported out-of-bounds read errors in     several PNG chunk handling functions (CVE-2007-5269).
  Impact :

    A remote attacker could craft an image that when processed or viewed by     an application using libpng would cause the application to terminate     abnormally.
  Workaround :

    There is no known workaround at this time.

Several flaws were discovered in the way libpng handled various PNG image chunks. An attacker could create a carefully crafted PNG image file in such a way that it could cause an application linked with libpng to crash when the file was manipulated. (CVE-2007-5269)

New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix security issues.

SunOS 5.10: libpng Patch.
Date this patch was last updated by Sun : Jul/18/12

The remote host is affected by the vulnerability described in GLSA-201209-25 (VMware Player, Server, Workstation: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in VMware Player, Server,       and Workstation. Please review the CVE identifiers referenced below for       details.
  Impact :

    Local users may be able to gain escalated privileges, cause a Denial of       Service, or gain sensitive information.
    A remote attacker could entice a user to open a specially crafted file,       possibly resulting in the remote execution of arbitrary code, or a Denial       of Service. Remote attackers also may be able to spoof DNS traffic, read       arbitrary files, or inject arbitrary web script to the VMware Server       Console.
    Furthermore, guest OS users may be able to execute arbitrary code on the       host OS, gain escalated privileges on the guest OS, or cause a Denial of       Service (crash the host OS).
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-201412-11 (AMD64 x86 emulation base libraries: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in AMD64 x86 emulation       base libraries. Please review the CVE identifiers referenced below for       details.
  Impact :

    A context-dependent attacker may be able to execute arbitrary code,       cause a Denial of Service condition, or obtain sensitive information.
  Workaround :

    There is no known workaround at this time.

Several vulnerabilities have been discovered in libpng, a library for reading and writing PNG files. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2007-2445     The png_handle_tRNS function allows attackers to cause a     denial of service (application crash) via a grayscale     PNG image with a bad tRNS chunk CRC value.

  - CVE-2007-5269     Certain chunk handlers allow attackers to cause a denial     of service (crash) via crafted pCAL, sCAL, tEXt, iTXt,     and ztXT chunking in PNG images, which trigger     out-of-bounds read operations.

  - CVE-2008-1382     libpng allows context-dependent attackers to cause a     denial of service (crash) and possibly execute arbitrary     code via a PNG file with zero length 'unknown' chunks,     which trigger an access of uninitialized memory.

  - CVE-2008-5907     The png_check_keyword might allow context-dependent     attackers to set the value of an arbitrary memory     location to zero via vectors involving creation of     crafted PNG files with keywords.

  - CVE-2008-6218     A memory leak in the png_handle_tEXt function allows     context-dependent attackers to cause a denial of service     (memory exhaustion) via a crafted PNG file.

  - CVE-2009-0040     libpng allows context-dependent attackers to cause a     denial of service (application crash) or possibly     execute arbitrary code via a crafted PNG file that     triggers a free of an uninitialized pointer in (1) the     png_read_png function, (2) pCAL chunk handling, or (3)     setup of 16-bit gamma tables.

SunOS 5.10: libpng Patch.
Date this patch was last updated by Sun : Jun/15/17

The remote host is running a version of Mac OS X 10.4 that does not have the security update 2008-003 applied. 

This update contains security fixes for a number of programs.

SunOS 5.10_x86: libpng Patch.
Date this patch was last updated by Sun : Jun/15/17

Certain chunk handlers in libpng10 before 1.0.29 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL (png_handle_sCAL), (3) tEXt (png_push_read_tEXt), (4) iTXt (png_handle_iTXt), and (5) ztXT (png_handle_ztXt) chunking in PNG images, which trigger out-of-bounds read operations.

http://secunia.com/advisories/27093 http://www.frsirt.com/english/advisories/2007/3390 http://sourceforge.net/mailarchive/forum.php?thread_name=3.0.6.32.2007 1004082318.012a7628%40mail.comcast.net&forum_name=png-mng-implement

This update to 1.0.29 addresses these issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Specially crafted PNG files could crash applications while attempting to process the file by exploiting out-of-bounds read operations. This can be abused for local and remote denial of service attacks. The issue has been tracked by CVE-2007-5269.

SunOS 5.10: libpng Patch.
Date this patch was last updated by Sun : Jul/17/17

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
107983	Solaris 10 (x86) : 137081-10	Nessus	Solaris Local Security Checks	2018/3/12	2025/10/22	high
28296	SSA-2007-325-01a libpng for Slackware 10.1 and 10.2	Nessus	Slackware Local Security Checks	2007/11/26	2021/1/14	medium
27825	GLSA-200711-08 : libpng: Multiple Denials of Service	Nessus	Gentoo Local Security Checks	2007/11/8	2021/1/6	medium
60274	Scientific Linux Security Update : libpng on SL3.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
28295	Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 8.1 / 9.0 / 9.1 / current : libpng (SSA:2007-325-01)	Nessus	Slackware Local Security Checks	2007/11/26	2021/1/14	medium
107483	Solaris 10 (sparc) : 137080-07	Nessus	Solaris Local Security Checks	2018/3/12	2025/10/24	high
62383	GLSA-201209-25 : VMware Player, Server, Workstation: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2012/10/1	2021/1/6	medium
79964	GLSA-201412-11 : AMD64 x86 emulation base libraries: Multiple vulnerabilities (Heartbleed)	Nessus	Gentoo Local Security Checks	2014/12/15	2022/5/5	critical
35988	Debian DSA-1750-1 : libpng - several vulnerabilities	Nessus	Debian Local Security Checks	2009/3/23	2021/1/4	high
107484	Solaris 10 (sparc) : 137080-09	Nessus	Solaris Local Security Checks	2018/3/12	2025/10/24	high
32478	Mac OS X Multiple Vulnerabilities (Security Update 2008-003)	Nessus	MacOS X Local Security Checks	2008/5/29	2024/5/28	critical
107982	Solaris 10 (x86) : 137081-09	Nessus	Solaris Local Security Checks	2018/3/12	2025/10/22	high
27775	Fedora 7 : libpng10-1.0.29-1.fc7 (2007-2521)	Nessus	Fedora Local Security Checks	2007/11/6	2021/1/11	medium
41164	SuSE9 Security Update : libpng (YOU Patch Number 11956)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	medium
107485	Solaris 10 (sparc) : 137080-10	Nessus	Solaris Local Security Checks	2018/3/12	2025/10/24	high

检测

插件搜索

high

medium

medium

medium

medium

high

medium

critical

high

high

critical

high

medium

medium

high