Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-3425
4.3
MEDIUMCVSS v2
Published
August 13, 2012
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
The png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48, 1.4.x before 1.4.10, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large avail_in field value in a PNG image.
pnggroup/libpng
GitHubLIBPNG: Portable Network Graphics support, official libpng repository
GitHubLIBPNG: Portable Network Graphics support, official libpng repository= 1.4.9, = 1.4.4, = 1.4.7, = 1.4.1, = 1.4.2, = 1.4.0, = 1.4.6, = 1.4.5, = 1.4.3, = 1.4.8, = 1.2.14, = 1.2.45, = 1.2.46, = 1.2.33, = 1.2.16, = 1.2.35, = 1.2.29, = 1.2.26, = 1.2.7, = 1.2.43, = 1.2.2, = 1.2.4, = 1.2.30, = 1.2.47, = 1.2.36, = 1.2.18, = 1.2.22, = 1.2.12, = 1.2.39, = 1.2.44, = 1.2.21, = 1.2.20, = 1.2.0, = 1.2.27, = 1.2.48, = 1.2.37, = 1.2.15, = 1.2.17, = 1.2.6, = 1.2.8, = 1.2.32, = 1.2.19, = 1.2.23, = 1.2.9, = 1.2.10, = 1.2.11, = 1.2.13, = 1.2.41, = 1.2.42, = 1.2.34, = 1.2.25, = 1.2.24, = 1.2.28, = 1.2.31, = 1.2.2-20, = 1.2.2-16, = 1.2.40, = 1.2.38, = 1.2.1, = 1.2.3, = 1.2.5, = 1.5.9, = 1.5.8, = 1.5.7, = 1.5.1, = 1.5.6, = 1.5.3, = 1.5.4, = 1.5.10, = 1.5.0, = 1.5.5, = 1.5.2, = 1.0.37, = 1.0.41, = 1.0.46, = 1.0.1, = 1.0.8, = 1.0.55, = 1.0.14, = 1.0.17, = 1.0.35, = 1.0.52, = 1.0.22, = 1.0.38, = 1.0.20, = 1.0.9, = 1.0.6, = 1.0.50, = 1.0.21, = 1.0.34, = 1.0.32, = 1.0.11, = 1.0.44, = 1.0.43, = 1.0.27, = 1.0.25, = 1.0.13, = 1.0.57, = 1.0.42, = 1.0.2, = 1.0.3, = 1.0.29, = 1.0.33, = 1.0.51, = 1.0.23, = 1.0.24, = 1.0.19, = 1.0.56, = 1.0.45, = 1.0.48, = 1.0.31, = 1.0.5, = 1.0.26, = 1.0.39, = 1.0.15, = 1.0.40, = 1.0.7, = 1.0.28, = 1.0.10, = 1.0.12, = 1.0.0, = 1.0.30, = 1.0.54, = 1.0.53, = 1.0.16, = 1.0.18, = 1.0.47NVD