• info
• discussion
• exploit
• solution
• references

Libpng Graphics Library Unspecified Remote Buffer Overflow Vulnerability

Solution:
The vendor has released libpng 1.2.6rc1 to address these issues.


libpng libpng3 1.2 .0

• libpng libpng-1.2.6rc1.tar.gz
  http://prdownloads.sourceforge.net/libpng/libpng-1.2.6rc1.tar.gz?downl oad

libpng libpng3 1.2.1

• Debian libpng-dev_1.2.1-1.1.woody.7_arm.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng-dev_1 .2.1-1.1.woody.7_arm.deb


• Debian libpng-dev_1.2.1-1.1.woody.7_hppa.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng-dev_1 .2.1-1.1.woody.7_hppa.deb


• Debian libpng-dev_1.2.1-1.1.woody.7_i386.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng-dev_1 .2.1-1.1.woody.7_i386.deb


• Debian libpng-dev_1.2.1-1.1.woody.7_ia64.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng-dev_1 .2.1-1.1.woody.7_ia64.deb


• Debian libpng-dev_1.2.1-1.1.woody.7_m68k.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng-dev_1 .2.1-1.1.woody.7_m68k.deb


• Debian libpng-dev_1.2.1-1.1.woody.7_mips.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng-dev_1 .2.1-1.1.woody.7_mips.deb


• Debian libpng-dev_1.2.1-1.1.woody.7_mipsel.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng-dev_1 .2.1-1.1.woody.7_mipsel.deb


• Debian libpng-dev_1.2.1-1.1.woody.7_powerpc.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng-dev_1 .2.1-1.1.woody.7_powerpc.deb


• Debian libpng-dev_1.2.1-1.1.woody.7_s390.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng-dev_1 .2.1-1.1.woody.7_s390.deb


• Debian libpng-dev_1.2.1-1.1.woody.7_sparc.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng-dev_1 .2.1-1.1.woody.7_sparc.deb


• Debian libpng3_1.2.1-1.1.woody.7_arm.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng3_1.2. 1-1.1.woody.7_arm.deb


• Debian libpng3_1.2.1-1.1.woody.7_hppa.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng3_1.2. 1-1.1.woody.7_hppa.deb


• Debian libpng3_1.2.1-1.1.woody.7_i386.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng3_1.2. 1-1.1.woody.7_i386.deb


• Debian libpng3_1.2.1-1.1.woody.7_ia64.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng3_1.2. 1-1.1.woody.7_ia64.deb


• Debian libpng3_1.2.1-1.1.woody.7_m68k.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng3_1.2. 1-1.1.woody.7_m68k.deb


• Debian libpng3_1.2.1-1.1.woody.7_mips.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng3_1.2. 1-1.1.woody.7_mips.deb


• Debian libpng3_1.2.1-1.1.woody.7_mipsel.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng3_1.2. 1-1.1.woody.7_mipsel.deb


• Debian libpng3_1.2.1-1.1.woody.7_powerpc.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng3_1.2. 1-1.1.woody.7_powerpc.deb


• Debian libpng3_1.2.1-1.1.woody.7_s390.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng3_1.2. 1-1.1.woody.7_s390.deb


• Debian libpng3_1.2.1-1.1.woody.7_sparc.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/libp/libpng3/libpng3_1.2. 1-1.1.woody.7_sparc.deb


• libpng libpng-1.2.6rc1.tar.gz
  http://prdownloads.sourceforge.net/libpng/libpng-1.2.6rc1.tar.gz?downl oad

libpng libpng3 1.2.2

• libpng libpng-1.2.6rc1.tar.gz
  http://prdownloads.sourceforge.net/libpng/libpng-1.2.6rc1.tar.gz?downl oad


• RedHat libpng-1.2.2-20.3.legacy.i386.rpm
  http://download.fedoralegacy.org/redhat/9/updates/i386/libpng-1.2.2-20 .3.legacy.i386.rpm


• RedHat libpng-1.2.5-7.1.legacy.i386.rpm
  http://download.fedoralegacy.org/fedora/1/updates/i386/libpng-1.2.5-7. 1.legacy.i386.rpm


• RedHat libpng-devel-1.2.2-20.3.legacy.i386.rpm
  http://download.fedoralegacy.org/redhat/9/updates/i386/libpng-devel-1. 2.2-20.3.legacy.i386.rpm


• RedHat libpng-devel-1.2.5-7.1.legacy.i386.rpm
  http://download.fedoralegacy.org/fedora/1/updates/i386/libpng-devel-1. 2.5-7.1.legacy.i386.rpm

libpng libpng3 1.2.3

• libpng libpng-1.2.6rc1.tar.gz
  http://prdownloads.sourceforge.net/libpng/libpng-1.2.6rc1.tar.gz?downl oad

libpng libpng3 1.2.4

• libpng libpng-1.2.6rc1.tar.gz
  http://prdownloads.sourceforge.net/libpng/libpng-1.2.6rc1.tar.gz?downl oad

libpng libpng3 1.2.5

• libpng libpng-1.2.6rc1.tar.gz
  http://prdownloads.sourceforge.net/libpng/libpng-1.2.6rc1.tar.gz?downl oad

SCO Unixware 7.1.4

• SCO erg712684.pkg
  ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.16/erg712684.pkg