libpng: Buffer overflow

libpng: Buffer overflow A buffer overflow has been found in the libpng library that could lead to the execution of arbitrary code. libpng 2006-07-19 2006-07-19 138433 138672 remote 1.2.12 1.2.12 2.5.1 2.5.1

libpng is an open, extensible image format library, with lossless compression.

In pngrutil.c, the function png_decompress_chunk() allocates insufficient space for an error message, potentially overwriting stack data, leading to a buffer overflow.

By enticing a user to load a maliciously crafted PNG image, an attacker could execute arbitrary code with the rights of the user, or crash the application using the libpng library, such as the emul-linux-x86-baselibs.

There is no known workaround at this time.

All libpng users should upgrade to the latest version:


    # emerge --sync
    # emerge --ask --oneshot --verbose ">=media-libs/libpng-1.2.12"

All AMD64 emul-linux-x86-baselibs users should also upgrade to the latest version:


    # emerge --sync
    # emerge --ask --oneshot --verbose ">=app-emulation/emul-linux-x86-baselibs-2.5.1"

libpng Changelog CVE-2006-3334 falco daxomatic koon