Vulnerability Note VU#643140

Libpng 1.5.0 png_set_rgb_to_gray() vulnerability

Overview

Libpng-1.5.0 introduced a vulnerability in the rgb-to-gray transform function.

I. Description

Libpng based applications that call the png_set_rgb_to_gray() function from pngrtran.c are vulnerable. Libpng versions prior to 1.5.0 are not vulnerable.

II. Impact

An attacker may cause the application to crash or execute arbitrary code as the user.

III. Solution

Apply an Update

Upgrade to version 1.5.1.

Vendor Information

No Information Available

References

http://sourceforge.net/mailarchive/forum.php?thread_name=002b01cbb0e2%24ae636c80%240b2a4580%24%40acm.org&forum_name=png-mng-implement
http://libpng.sourceforge.net/
ftp://ftp.simplesystems.org/pub/png-group/src/libpng-1.5.1beta01-1.5.0-diff.txt
ftp://ftp.simplesystems.org/pub/png-group/src/libpng-1.5.1beta01-README.txt

Credit

Thanks to Glenn Randers-Pehrson for reporting this vulnerability.

This document was written by Jared Allar.

Other Information

Date Public:	2011-01-08
Date First Published:	2011-01-11
Date Last Updated:	2011-02-03
CERT Advisory:
CVE-ID(s):	CVE-2011-0408
NVD-ID(s):	CVE-2011-0408
US-CERT Technical Alerts:
Severity Metric:	0.00
Document Revision:	18

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Produced 2011 by US-CERT, a government organization
Disclaimers and copyright information Get a PDF Reader