Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libpng | Greg_roelofs | * | 1.2.5 (including) |