LibPNG不正确计算偏移量缓冲区溢出漏洞发布时间：2002-12-19 更新时间：2002-12-19 严重程度：低 威胁程度：其它 错误类型：边界检查错误 利用方式：服务器模式 BUGTRAQ ID：6431 CVE(CAN) ID：CAN-2002-1363 受影响系统 libpng libpng 1.0.5详细描述 当新建或修改PNG文件的时候从libpng进行16位取样libpng图像库可能会不正确计算一些偏移量。 远程攻击者可以利用这个漏洞构建恶意PNG文件，诱使用户打开，触发漏洞。 解决方案 libpng libpng 1.0.5: Debian Upgrade libpng2-dev_1.0.5-1.1_sparc.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng2- dev_1.0.5-1.1_sparc.deb Debian Upgrade libpng2_1.0.5-1.1_sparc.deb http://security.debian.org/pool/updates/main/libp/libpng/ libpng2_1.0.5-1.1_sparc.deb Debian Upgrade libpng2-dev_1.0.5-1.1_powerpc.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng2- dev_1.0.5-1.1_powerpc.deb Debian Upgrade libpng2_1.0.5-1.1_powerpc.deb http://security.debian.org/pool/updates/main/libp/libpng/ libpng2_1.0.5-1.1_powerpc.deb Debian Upgrade libpng2-dev_1.0.5-1.1_m68k.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng2- dev_1.0.5-1.1_m68k.deb Debian Upgrade libpng2_1.0.5-1.1_m68k.deb http://security.debian.org/pool/updates/main/libp/libpng/ libpng2_1.0.5-1.1_m68k.deb Debian Upgrade libpng2-dev_1.0.5-1.1_i386.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng2- dev_1.0.5-1.1_i386.deb Debian Upgrade libpng2_1.0.5-1.1_i386.deb http://security.debian.org/pool/updates/main/libp/libpng/ libpng2_1.0.5-1.1_i386.deb Debian Upgrade libpng2-dev_1.0.5-1.1_arm.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng2- dev_1.0.5-1.1_arm.deb Debian Upgrade libpng2_1.0.5-1.1_arm.deb http://security.debian.org/pool/updates/main/libp/libpng/ libpng2_1.0.5-1.1_arm.deb Debian Upgrade libpng2-dev_1.0.5-1.1_alpha.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng2- dev_1.0.5-1.1_alpha.deb Debian Upgrade libpng2_1.0.5-1.1_alpha.deb http://security.debian.org/pool/updates/main/libp/libpng/ libpng2_1.0.5-1.1_alpha.deb libpng libpng 1.0.6: libpng libpng 1.0.7: libpng libpng 1.0.8: libpng libpng 1.0.9: libpng libpng 1.0.11: libpng libpng 1.0.12: Debian Upgrade libpng2-dev_1.0.12-3.woody.3_sparc.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng2- dev_1.0.12-3.woody.3_sparc.deb Debian Upgrade libpng2_1.0.12-3.woody.3_sparc.deb http://security.debian.org/pool/updates/main/libp/libpng/ libpng2_1.0.12-3.woody.3_sparc.deb Debian Upgrade libpng2-dev_1.0.12-3.woody.3_s390.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng2- dev_1.0.12-3.woody.3_s390.deb Debian Upgrade libpng2_1.0.12-3.woody.3_s390.deb http://security.debian.org/pool/updates/main/libp/libpng/ libpng2_1.0.12-3.woody.3_s390.deb Debian Upgrade libpng2-dev_1.0.12-3.woody.3_powerpc.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng2- dev_1.0.12-3.woody.3_powerpc.deb Debian Upgrade libpng2_1.0.12-3.woody.3_powerpc.deb http://security.debian.org/pool/updates/main/libp/libpng/ libpng2_1.0.12-3.woody.3_powerpc.deb Debian Upgrade libpng2-dev_1.0.12-3.woody.3_mipsel.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng2- dev_1.0.12-3.woody.3_mipsel.deb Debian Upgrade libpng2_1.0.12-3.woody.3_mipsel.deb http://security.debian.org/pool/updates/main/libp/libpng/ libpng2_1.0.12-3.woody.3_mipsel.deb Debian Upgrade libpng2-dev_1.0.12-3.woody.3_mips.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng2- dev_1.0.12-3.woody.3_mips.deb Debian Upgrade libpng2_1.0.12-3.woody.3_mips.deb http://security.debian.org/pool/updates/main/libp/libpng/ libpng2_1.0.12-3.woody.3_mips.deb Debian Upgrade libpng2-dev_1.0.12-3.woody.3_m68k.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng2- dev_1.0.12-3.woody.3_m68k.deb Debian Upgrade libpng2_1.0.12-3.woody.3_m68k.deb http://security.debian.org/pool/updates/main/libp/libpng/ libpng2_1.0.12-3.woody.3_m68k.deb Debian Upgrade libpng2-dev_1.0.12-3.woody.3_hppa.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng2- dev_1.0.12-3.woody.3_hppa.deb Debian Upgrade libpng2_1.0.12-3.woody.3_hppa.deb http://security.debian.org/pool/updates/main/libp/libpng/ libpng2_1.0.12-3.woody.3_hppa.deb Debian Upgrade libpng2-dev_1.0.12-3.woody.3_ia64.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng2- dev_1.0.12-3.woody.3_ia64.deb Debian Upgrade libpng2_1.0.12-3.woody.3_ia64.deb http://security.debian.org/pool/updates/main/libp/libpng/ libpng2_1.0.12-3.woody.3_ia64.deb Debian Upgrade libpng2-dev_1.0.12-3.woody.3_i386.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng2- dev_1.0.12-3.woody.3_i386.deb Debian Upgrade libpng2_1.0.12-3.woody.3_i386.deb http://security.debian.org/pool/updates/main/libp/libpng/ libpng2_1.0.12-3.woody.3_i386.deb Debian Upgrade libpng2-dev_1.0.12-3.woody.3_arm.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng2- dev_1.0.12-3.woody.3_arm.deb Debian Upgrade libpng2_1.0.12-3.woody.3_arm.deb http://security.debian.org/pool/updates/main/libp/libpng/ libpng2_1.0.12-3.woody.3_arm.deb Debian Upgrade libpng2-dev_1.0.12-3.woody.3_alpha.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng2- dev_1.0.12-3.woody.3_alpha.deb Debian Upgrade libpng2_1.0.12-3.woody.3_alpha.deb http://security.debian.org/pool/updates/main/libp/libpng/ libpng2_1.0.12-3.woody.3_alpha.deb libpng libpng 1.0.13: libpng libpng 1.0.14: libpng libpng 1.2 .0: libpng libpng 1.2.1: Debian Upgrade libpng3_1.2.1-1.1.woody.3_sparc.deb http://security.debian.org/pool/updates/main/libp/libpng3/ libpng3_1.2.1-1.1.woody.3_sparc.deb Debian Upgrade libpng-dev_1.2.1-1.1.woody.3_sparc.deb http://security.debian.org/pool/updates/main/libp/libpng3/libpng- dev_1.2.1-1.1.woody.3_sparc.deb Debian Upgrade libpng3_1.2.1-1.1.woody.3_s390.deb http://security.debian.org/pool/updates/main/libp/libpng3/ libpng3_1.2.1-1.1.woody.3_s390.deb Debian Upgrade libpng-dev_1.2.1-1.1.woody.3_s390.deb http://security.debian.org/pool/updates/main/libp/libpng3/libpng- dev_1.2.1-1.1.woody.3_s390.deb Debian Upgrade libpng3_1.2.1-1.1.woody.3_powerpc.deb http://security.debian.org/pool/updates/main/libp/libpng3/ libpng3_1.2.1-1.1.woody.3_powerpc.deb Debian Upgrade libpng-dev_1.2.1-1.1.woody.3_powerpc.deb http://security.debian.org/pool/updates/main/libp/libpng3/libpng- dev_1.2.1-1.1.woody.3_powerpc.deb Debian Upgrade libpng3_1.2.1-1.1.woody.3_mipsel.deb http://security.debian.org/pool/updates/main/libp/libpng3/ libpng3_1.2.1-1.1.woody.3_mipsel.deb Debian Upgrade libpng-dev_1.2.1-1.1.woody.3_mipsel.deb http://security.debian.org/pool/updates/main/libp/libpng3/libpng- dev_1.2.1-1.1.woody.3_mipsel.deb Debian Upgrade libpng3_1.2.1-1.1.woody.3_mips.deb http://security.debian.org/pool/updates/main/libp/libpng3/ libpng3_1.2.1-1.1.woody.3_mips.deb Debian Upgrade libpng-dev_1.2.1-1.1.woody.3_mips.deb http://security.debian.org/pool/updates/main/libp/libpng3/libpng- dev_1.2.1-1.1.woody.3_mips.deb Debian Upgrade libpng3_1.2.1-1.1.woody.3_m68k.deb http://security.debian.org/pool/updates/main/libp/libpng3/ libpng3_1.2.1-1.1.woody.3_m68k.deb Debian Upgrade libpng-dev_1.2.1-1.1.woody.3_m68k.deb http://security.debian.org/pool/updates/main/libp/libpng3/libpng- dev_1.2.1-1.1.woody.3_m68k.deb Debian Upgrade libpng3_1.2.1-1.1.woody.3_hppa.deb http://security.debian.org/pool/updates/main/libp/libpng3/ libpng3_1.2.1-1.1.woody.3_hppa.deb Debian Upgrade libpng-dev_1.2.1-1.1.woody.3_hppa.deb http://security.debian.org/pool/updates/main/libp/libpng3/libpng- dev_1.2.1-1.1.woody.3_hppa.deb Debian Upgrade libpng3_1.2.1-1.1.woody.3_ia64.deb http://security.debian.org/pool/updates/main/libp/libpng3/ libpng3_1.2.1-1.1.woody.3_ia64.deb Debian Upgrade libpng-dev_1.2.1-1.1.woody.3_ia64.deb http://security.debian.org/pool/updates/main/libp/libpng3/libpng- dev_1.2.1-1.1.woody.3_ia64.deb Debian Upgrade libpng3_1.2.1-1.1.woody.3_i386.deb http://security.debian.org/pool/updates/main/libp/libpng3/ libpng3_1.2.1-1.1.woody.3_i386.deb Debian Upgrade libpng-dev_1.2.1-1.1.woody.3_i386.deb http://security.debian.org/pool/updates/main/libp/libpng3/libpng- dev_1.2.1-1.1.woody.3_i386.deb Debian Upgrade libpng3_1.2.1-1.1.woody.3_arm.deb http://security.debian.org/pool/updates/main/libp/libpng3/ libpng3_1.2.1-1.1.woody.3_arm.deb Debian Upgrade libpng-dev_1.2.1-1.1.woody.3_arm.deb http://security.debian.org/pool/updates/main/libp/libpng3/libpng- dev_1.2.1-1.1.woody.3_arm.deb Debian Upgrade libpng3_1.2.1-1.1.woody.3_alpha.deb http://security.debian.org/pool/updates/main/libp/libpng3/ libpng3_1.2.1-1.1.woody.3_alpha.deb Debian Upgrade libpng-dev_1.2.1-1.1.woody.3_alpha.deb http://security.debian.org/pool/updates/main/libp/libpng3/libpng- dev_1.2.1-1.1.woody.3_alpha.deb libpng libpng 1.2.2: libpng libpng 1.2.3: libpng libpng 1.2.4: 相关信息 发现者：Glenn Randers-Pehrson 相关资料：http://online.securityfocus.com/advisories/4803 |
