FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2008-1382

This CVE name corresponds to:

Entered	Topic
2008-04-25	png -- unknown chunk processing uninitialized memory access

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2008-1382 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2008-1382
Phase	Assigned(20080318)

Description

libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG file with zero length "unknown" chunks, which trigger an access of uninitialized memory.

References

Source	Reference
BUGTRAQ	20080414 [oCERT-2008-003] libpng zero-length chunks incorrect handling
BUGTRAQ	20080429 rPSA-2008-0151-1 libpng
MISC	http://www.ocert.org/advisories/ocert-2008-003.html
CONFIRM	http://libpng.sourceforge.net/Advisory-1.2.26.txt
CONFIRM	http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0151
GENTOO	GLSA-200804-15
SLACKWARE	SSA:2008-119-01
SUSE	SUSE-SR:2008:010
BID	28770
FRSIRT	ADV-2008-1225
OSVDB	44364
SECTRACK	1019840
SECUNIA	29792
SECUNIA	29678
SECUNIA	29992
SECUNIA	29957
SECUNIA	30009
XF	libpng-zero-length-code-execution(41800)