[Bug 1086514] CVE-2013-7353 libpng: integer overflow leading to a heap-based buffer overflow in png_set_unknown_chunks()

bugzilla at redhat.com bugzilla at redhat.com
Mon Apr 21 07:48:12 UTC 2014


https://bugzilla.redhat.com/show_bug.cgi?id=1086514

Huzaifa S. Sidhpurwala <huzaifas at redhat.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Whiteboard|impact=moderate,public=2014 |impact=moderate,public=2014
                   |0411,reported=20140411,sour |0411,reported=20140411,sour
                   |ce=internet,cvss2=5.1/AV:N/ |ce=internet,cvss2=5.1/AV:N/
                   |AC:H/Au:N/C:P/I:P/A:P,rhel- |AC:H/Au:N/C:P/I:P/A:P,rhel-
                   |5/libpng=affected,rhel-6/li |5/libpng=notaffected,rhel-6
                   |bpng=affected,rhel-7/libpng |/libpng=notaffected,rhel-7/
                   |=affected,rhel-7/libpng12=a |libpng=affected,rhel-7/libp
                   |ffected,fedora-19/libpng=af |ng12=notaffected,fedora-19/
                   |fected,fedora-20/libpng=not |libpng=affected,fedora-20/l
                   |affected,fedora-all/libpng1 |ibpng=notaffected,fedora-al
                   |0=affected,fedora-all/libpn |l/libpng10=notaffected,fedo
                   |g12=affected,fedora-20/libp |ra-all/libpng12=notaffected
                   |ng15=affected,fedora-19/min |,fedora-20/libpng15=affecte
                   |gw-libpng=affected,fedora-2 |d,fedora-19/mingw-libpng=af
                   |0/mingw-libpng=notaffected, |fected,fedora-20/mingw-libp
                   |epel-5/mingw32-libpng=affec |ng=notaffected,epel-5/mingw
                   |ted,epel-6/libpng10=affecte |32-libpng=notaffected,epel-
                   |d,epel-6/mingw32-libpng=aff |6/libpng10=notaffected,epel
                   |ected                       |-6/mingw32-libpng=notaffect
                   |                            |ed



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=sNRfmXDtGv&a=cc_unsubscribe


More information about the mingw mailing list