This update fixes the way that libpng10 handles unknown zero-length chunks, which in previous versions could result in writing to attacker controlled addresses, depending on how the libpng api is used. To be affected, an application would have to call png_set_keep_unknown_chunks(), which tells libpng not to ignore unknown chunks, but to do something with them. The PNG spec allows for 'unknown' chunks, which are ignored by default, but an application could in theory embed some sort of extra data in a png image, then later get it back out via this mechanism. No packages in Fedora are believed to be affected by this issue, but it's possible that third-party applications could be.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:0333 advisory.

    The libpng packages contain a library of functions for creating and     manipulating PNG (Portable Network Graphics) image format files.

    A flaw was discovered in libpng that could result in libpng trying to     free() random memory if certain, unlikely error conditions occurred. If a     carefully-crafted PNG file was loaded by an application linked against     libpng, it could cause the application to crash or, potentially, execute     arbitrary code with the privileges of the user running the application.
    (CVE-2009-0040)

    A flaw was discovered in the way libpng handled PNG images containing     unknown chunks. If an application linked against libpng attempted to     process a malformed, unknown chunk in a malicious PNG image, it could cause     the application to crash. (CVE-2008-1382)

    Users of libpng and libpng10 should upgrade to these updated packages,     which contain backported patches to correct these issues. All running     applications using libpng or libpng10 must be restarted for the update to     take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Specially crafted png files could overwrite arbitrary memory.
Attackers could potentially exploit that to execute arbitrary code (CVE-2008-1382).

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0333 advisory.

    [1.2.10-7.1.el5_3.2]
    - Back-port fixes for CVE-2008-1382 and CVE-2009-0040.
    Resolves: #487168

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-200804-15 (libpng: Execution of arbitrary code)

    Tavis Ormandy of the Google Security Team discovered that libpng does     not handle zero-length unknown chunks in PNG files correctly, which     might lead to memory corruption in applications that call     png_set_read_user_chunk_fn() or png_set_keep_unknown_chunks().
  Impact :

    A remote attacker could entice a user or automated system to process a     specially crafted PNG image in an application using libpng and possibly     execute arbitrary code with the privileges of the user running the     application. Note that processing of unknown chunks is disabled by     default in most PNG applications, but some such as ImageMagick are     affected.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-200805-10 (Pngcrush: User-assisted execution of arbitrary code)

    It has been reported that Pngcrush includes a copy of libpng that is     vulnerable to a memory corruption (GLSA 200804-15).
  Impact :

    A remote attacker could entice a user to process a specially crafted     PNG image, possibly resulting in the execution of arbitrary code with     the privileges of the user running the application, or a Denial of     Service.
  Workaround :

    There is no known workaround at this time.

SunOS 5.10_x86: libpng Patch.
Date this patch was last updated by Sun : Jul/17/17

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2009-25:01 advisory.

    The libpng package contains a library of functions for creating and manipulating PNG (Portable Network     Graphics) image format files.  PNG is a bit-mapped graphics format similar to the GIF format.  PNG was     created to replace the GIF format, since GIF uses a patented data compression algorithm.
    Libpng should be installed if you need to manipulate PNG format image files.
    Fixed bugs:
    CVE-2008-1382     libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-     dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG     file with zero length unknown chunks, which trigger an access of uninitialized memory.
    CVE-2009-0040     The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and     other applications, allows context-dependent attackers to cause a denial of service (application crash) or     possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in     (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Update to new upstream version 1.2.29. Among other bug fixes, this introduces a minor security fix in the handling of unknown chunks - CVE-2008-1382: http://libpng.sourceforge.net/Advisory-1.2.26.txt http://www.ocert.org/advisories/ocert-2008-003.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

SunOS 5.10: libpng Patch.
Date this patch was last updated by Sun : Jul/18/12

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.5. 

Mac OS X 10.5.5 contains security fixes for a number of programs.

The remote host is affected by the vulnerability described in GLSA-200812-15 (POV-Ray: User-assisted execution of arbitrary code)

    POV-Ray uses a statically linked copy of libpng to view and output PNG     files. The version shipped with POV-Ray is vulnerable to CVE-2008-3964,     CVE-2008-1382, CVE-2006-3334, CVE-2006-0481, CVE-2004-0768. A bug in     POV-Ray's build system caused it to load the old version when your     installed copy of libpng was >=media-libs/libpng-1.2.10.
  Impact :

    An attacker could entice a user to load a specially crafted PNG file as     a texture, resulting in the execution of arbitrary code with the     permissions of the user running the application.
  Workaround :

    There is no known workaround at this time.

SunOS 5.10_x86: libpng Patch.
Date this patch was last updated by Sun : Jun/15/17

Updated libpng and libpng10 packages that fix a couple of security issues are now available for Red Hat Enterprise Linux 2.1, 4, and 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The libpng packages contain a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files.

A flaw was discovered in libpng that could result in libpng trying to free() random memory if certain, unlikely error conditions occurred.
If a carefully-crafted PNG file was loaded by an application linked against libpng, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2009-0040)

A flaw was discovered in the way libpng handled PNG images containing 'unknown' chunks. If an application linked against libpng attempted to process a malformed, unknown chunk in a malicious PNG image, it could cause the application to crash. (CVE-2008-1382)

Users of libpng and libpng10 should upgrade to these updated packages, which contain backported patches to correct these issues. All running applications using libpng or libpng10 must be restarted for the update to take effect.

SunOS 5.10: libpng Patch.
Date this patch was last updated by Sun : Jul/17/17

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
32458	Fedora 9 : libpng10-1.0.37-1.fc9 (2008-3683)	Nessus	Fedora Local Security Checks	2008/5/29	2021/1/11	high
35775	RHEL 4 / 5 : libpng (RHSA-2009:0333)	Nessus	Red Hat Local Security Checks	2009/3/5	2024/11/4	critical
32024	openSUSE 10 Security Update : libpng (libpng-5180)	Nessus	SuSE Local Security Checks	2008/4/22	2021/1/14	high
67815	Oracle Linux 5 : libpng (ELSA-2009-0333)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	critical
31962	GLSA-200804-15 : libpng: Execution of arbitrary code	Nessus	Gentoo Local Security Checks	2008/4/17	2021/1/6	high
32301	GLSA-200805-10 : Pngcrush: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	2008/5/13	2021/1/6	high
107983	Solaris 10 (x86) : 137081-10	Nessus	Solaris Local Security Checks	2018/3/12	2025/10/22	high
284348	MiracleLinux 3 : libpng-1.2.10-7.1.2.1AXS3 (AXSA:2009-25:01)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	critical
33082	Fedora 7 : libpng-1.2.29-1.fc7 (2008-4947)	Nessus	Fedora Local Security Checks	2008/6/4	2021/1/11	high
32459	Fedora 8 : libpng10-1.0.37-1.fc8 (2008-3937)	Nessus	Fedora Local Security Checks	2008/5/29	2021/1/11	high
107483	Solaris 10 (sparc) : 137080-07	Nessus	Solaris Local Security Checks	2018/3/12	2025/10/24	high
34211	Mac OS X 10.5.x < 10.5.5 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2008/9/16	2024/5/28	critical
35107	GLSA-200812-15 : POV-Ray: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	2008/12/15	2021/1/6	high
107982	Solaris 10 (x86) : 137081-09	Nessus	Solaris Local Security Checks	2018/3/12	2025/10/22	high
43731	CentOS 4 : libpng (CESA-2009:0333)	Nessus	CentOS Local Security Checks	2010/1/6	2021/1/4	high
40036	openSUSE Security Update : libpng-devel (libpng-devel-66)	Nessus	SuSE Local Security Checks	2009/7/21	2021/1/14	high
107485	Solaris 10 (sparc) : 137080-10	Nessus	Solaris Local Security Checks	2018/3/12	2025/10/24	high

检测

插件搜索

high

critical

high

critical

high

high

high

critical

high

high

high

critical

high

high

high

high

high