National Cyber Awareness System

Vulnerability Summary for CVE-2002-1363

Overview

Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a buffer overflow attack on the row buffers.

Impact

CVSS Severity (version 2.0 incomplete approximation):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: DEBIAN

Name: DSA-213

Type: Advisory; Patch Information

Hyperlink:http://www.debian.org/security/2002/dsa-213

External Source: XF

Name: libpng-file-offset-bo(10925)

Type: Advisory

Hyperlink:http://xforce.iss.net/xforce/xfdb/10925

External Source: FEDORA

Name: FLSA:1943

Hyperlink:https://bugzilla.fedora.us/show_bug.cgi?id=1943

External Source: BID

Name: 6431

Hyperlink:http://www.securityfocus.com/bid/6431

External Source: REDHAT

Name: RHSA-2004:402

Hyperlink:http://www.redhat.com/support/errata/RHSA-2004-402.html

External Source: REDHAT

Name: RHSA-2004:249

Hyperlink:http://www.redhat.com/support/errata/RHSA-2004-249.html

External Source: REDHAT

Name: RHSA-2003:157

Hyperlink:http://www.redhat.com/support/errata/RHSA-2003-157.html

External Source: REDHAT

Name: RHSA-2003:119

Hyperlink:http://www.redhat.com/support/errata/RHSA-2003-119.html

External Source: REDHAT

Name: RHSA-2003:007

Hyperlink:http://www.redhat.com/support/errata/RHSA-2003-007.html

External Source: REDHAT

Name: RHSA-2003:006

Hyperlink:http://www.redhat.com/support/errata/RHSA-2003-006.html

External Source: SUSE

Name: SUSE-SA:2003:0004

Hyperlink:http://www.novell.com/linux/security/advisories/2003_004_libpng.html

External Source: MANDRAKE

Name: MDKSA-2004:063

Hyperlink:http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:063

External Source: MANDRAKE

Name: MDKSA-2003:008

Hyperlink:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:008

US Government Resource: oval:org.mitre.oval:def:3657

Name: oval:org.mitre.oval:def:3657

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3657

References to Check Content

Identifier:oval:org.mitre.oval:def:3657

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:3657

Identifier:oval:org.mitre.oval:def:10083

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10083