Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

Debian: DSA-2410-1 Moderate: libpng Integer Overflow Remote Threat

debian
Calendar Grey February 15, 2012
Scroller Debian
Buffer overflow vulnerability in libjpeg may enable remote execution of malicious code; addressed in Debian DSA-2411-2. Update advised.
Jueri Aedla discovered an integer overflow in the libpng PNG library, which could lead to the execution of arbitrary code if a malformed image is processed
Topics%20covered

Topics Covered

security advisory debian libpng remote threat integer overflow arbitrary code

Summary

Jueri Aedla discovered an integer overflow in the libpng PNG library,
which could lead to the execution of arbitrary code if a malformed
image is processed.

For the stable distribution (squeeze), this problem has been fixed in
version 1.2.44-1+squeeze2.

For the unstable distribution (sid), this problem will be fixed soon.

We recommend that you upgrade your libpng packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/



Package: libpng
CVE ID: CVE-2011-3026

Topics%20covered

Topics Covered

security advisory debian libpng remote threat integer overflow arbitrary code

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.