Libpng Library Uninitialized Pointer Arrays Memory Corruption Vulnerabilities

Libpng Library Uninitialized Pointer Arrays Memory Corruption Vulnerabilities

References:

[png-mng-implement] libpng-1.2.35 and libpng-1.0.43 fix security vulnerability (libpng)
Bugzilla Bug 478901: Upgrade libpng to 1.2.35 (libpng-1.2.34 and earlier might f (Glenn Randers-Pehrson)
eLynx Lab Homepage (eLynx Team)
libpng Homepage (libpng)
Pngcrush 1.6.14 Release Notes (Pngcrush)
Pngcrush Homepage (Pngcrush)
ASA-2009-078 libpng security update (RHSA-2009-0340) (Avaya)
ASA-2009-117 libpng security update (RHSA-2009-0333) (Avaya)
ASA-2009-208 Security Vulnerability in Solaris libpng(3) (Avaya)
Libpng-1.2.34 ADVISORY (libpng)
Mozilla Foundation Security Advisory 2009-10 (Mozilla)
Solution 259989: Security Vulnerability in Solaris libpng(3) May Allow Denial of (Sun)
VMSA-2009-0007 (VMware)
Vulnerability Note VU#649212 libpng fails to properly initialize element pointer (US-CERT)

Privacy Statement
Copyright 2010, SecurityFocus