LibPNG Malformed PNG Image Memory Corruption Vulnerability

Bugtraq ID:	5059
Class:	Boundary Condition Error
CVE:	CVE-2002-0660
Remote:	Yes
Local:	No
Published:	Jun 19 2002 12:00AM
Updated:	Jul 11 2009 01:56PM
Credit:	Discovered by Max <[email protected]>.
Vulnerable:	Rit Research Labs The Bat! 2.0 3 Beta Rit Research Labs The Bat! 2.0 1 Rit Research Labs The Bat! 2.0 Rit Research Labs The Bat! 1.101 Rit Research Labs The Bat! 1.53 d - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home Rit Research Labs The Bat! 1.52 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Rit Research Labs The Bat! 1.51 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Rit Research Labs The Bat! 1.49 Rit Research Labs The Bat! 1.48 Rit Research Labs The Bat! 1.47 Rit Research Labs The Bat! 1.46 Rit Research Labs The Bat! 1.45 Rit Research Labs The Bat! 1.44 Rit Research Labs The Bat! 1.43 Rit Research Labs The Bat! 1.42 f Rit Research Labs The Bat! 1.42 Rit Research Labs The Bat! 1.41 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Rit Research Labs The Bat! 1.39 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Rit Research Labs The Bat! 1.36 Rit Research Labs The Bat! 1.35 Rit Research Labs The Bat! 1.34 Rit Research Labs The Bat! 1.33 Rit Research Labs The Bat! 1.32 Rit Research Labs The Bat! 1.31 Rit Research Labs The Bat! 1.22 Rit Research Labs The Bat! 1.21 Rit Research Labs The Bat! 1.19 Rit Research Labs The Bat! 1.18 Rit Research Labs The Bat! 1.17 Rit Research Labs The Bat! 1.15 Rit Research Labs The Bat! 1.14 Rit Research Labs The Bat! 1.5 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Rit Research Labs The Bat! 1.1 Rit Research Labs The Bat! 1.0 43 Rit Research Labs The Bat! 1.0 41 Rit Research Labs The Bat! 1.0 39 Rit Research Labs The Bat! 1.0 37 Rit Research Labs The Bat! 1.0 36 Rit Research Labs The Bat! 1.0 35 Rit Research Labs The Bat! 1.0 32 Rit Research Labs The Bat! 1.0 31 Rit Research Labs The Bat! 1.0 29 Rit Research Labs The Bat! 1.0 28 Rit Research Labs The Bat! 1.0 15 Rit Research Labs The Bat! 1.0 11 Rit Research Labs The Bat! 1.0 build 1349 Rit Research Labs The Bat! 1.0 build 1336 Opera Software Opera Web Browser 6.0.1 linux libpng libpng3 1.2.3 libpng libpng3 1.2.2 + Redhat Linux 8.0 i386 libpng libpng3 1.2.1 + Debian Linux 3.0 + Debian Linux 3.0 + Mandriva Linux Mandrake 8.2 ppc + Mandriva Linux Mandrake 8.2 + Mandriva Linux Mandrake 8.2 + Slackware Linux 8.1 libpng libpng3 1.2 .0 libpng libpng 1.0.13 libpng libpng 1.0.12 - Caldera OpenLinux Server 3.1.1 - Caldera OpenLinux Server 3.1 - Caldera OpenLinux Workstation 3.1.1 - Caldera OpenLinux Workstation 3.1 + Debian Linux 3.0 + Mandriva Linux Mandrake 8.1 ia64 + Mandriva Linux Mandrake 8.1 + SuSE Linux 8.0 + SuSE Linux 7.3 sparc + SuSE Linux 7.3 ppc + SuSE Linux 7.3 libpng libpng 1.0.11 libpng libpng 1.0.9 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 libpng libpng 1.0.8 + Caldera OpenLinux Server 3.1.1 + Caldera OpenLinux Server 3.1 + Caldera OpenLinux Workstation 3.1.1 + Caldera OpenLinux Workstation 3.1 + MandrakeSoft Single Network Firewall 7.2 + Mandriva Linux Mandrake 7.2 + SuSE Linux 7.1 sparc + SuSE Linux 7.1 ppc + SuSE Linux 7.1 alpha + SuSE Linux 7.1 - Ximian GNOME 1.4 libpng libpng 1.0.7 libpng libpng 1.0.6 libpng libpng 1.0.5 + Debian Linux 2.2 sparc + Debian Linux 2.2 powerpc + Debian Linux 2.2 IA-32 + Debian Linux 2.2 arm + Debian Linux 2.2 alpha + Debian Linux 2.2 68k + MandrakeSoft Corporate Server 1.0.1 + Mandriva Linux Mandrake 7.1 Konqueror Konqueror the web browser 2.2.2
Not Vulnerable:	libpng libpng3 1.2.4 + MandrakeSoft Corporate Server 2.1 x86_64 + MandrakeSoft Corporate Server 2.1 + MandrakeSoft Multi Network Firewall 2.0 + Mandriva Linux Mandrake 9.0 + Mandriva Linux Mandrake 8.2 ppc + Mandriva Linux Mandrake 8.2 + SuSE Linux 8.1 libpng libpng 1.0.14 + Redhat Linux 7.3 i386 + Redhat Linux 7.2 ia64 + Redhat Linux 7.2 i386 + Redhat Linux 7.1 i386 + Redhat Linux 7.0 i386 + Redhat Linux 6.2 i386

LibPNG Malformed PNG Image Memory Corruption Vulnerability

The libpng graphics library is vulnerable to a memory corruption error when handling some malformed PNG images. This issue is due to a buffer overflow in functions related to progressive image loading. This may potentially be exploited to cause a denial of service in applications which use the vulnerable functions or theoretically to execute arbitrary code.

Some web browsers (such as Opera, Konqueror and Mozilla) rely on this library to handle PNG images.

LibPNG Malformed PNG Image Memory Corruption Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.