Alerts This Week
Warning Icon 1 535
Alerts This Week
Warning Icon 1 535

Debian: DSA-2446-1 Moderate Vulnerability in Libpng Code Execution Risk

debian
Calendar Grey April 4, 2012
Debian Logo
Fixes a vulnerability in libpng related to memory management, potentially allowing for arbitrary code execution. Security upgrades advised.
It was discovered that incorrect memory handling in the png_set_text2() function of the PNG library could lead to the execution of arbitrary code

Summary

It was discovered that incorrect memory handling in the png_set_text2()
function of the PNG library could lead to the execution of arbitrary
code.

For the stable distribution (squeeze), this problem has been fixed in
version libpng_1.2.44-1+squeeze4.

For the unstable distribution (sid), this problem will be fixed soon.

We recommend that you upgrade your incorrect memory handling packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/



Package: libpng
CVE ID: CVE-2011-3048

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here