[Bug 1045561] CVE-2013-6954 libpng: unhandled zero-length PLTE chunk or NULL palette
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1045561
Huzaifa S. Sidhpurwala <huzaifas(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20131219, |impact=low,public=20131219,
|reported=20131220,source=su |reported=20131220,source=su
|se,cvss2=4.3/AV:N/AC:M/Au:N |se,cvss2=4.3/AV:N/AC:M/Au:N
|/C:N/I:N/A:P,fedora-20/libp |/C:N/I:N/A:P,fedora-20/libp
|ng=affected,fedora-19/libpn |ng=affected,fedora-19/libpn
|g=affected,fedora-20/libpng |g=affected,fedora-20/libpng
|15=affected,fedora-all/libp |15=affected,fedora-all/libp
|ng12=affected,fedora-all/li |ng12=affected,fedora-all/li
|bpng10=affected,fedora-19/m |bpng10=affected,fedora-19/m
|ingw-libpng=affected,fedora |ingw-libpng=affected,fedora
|-20/mingw-libpng=affected,e |-20/mingw-libpng=affected,e
|pel-all/mingw32-libpng=affe |pel-all/mingw32-libpng=affe
|cted,epel-6/libpng10=affect |cted,epel-6/libpng10=affect
|ed,rhel-5/libpng=defer,rhel |ed,rhel-5/libpng=notaffecte
|-6/libpng=defer,rhel-7/libp |d,rhel-6/libpng=notaffected
|ng=affected,rhel-7/libpng12 |,rhel-7/libpng=affected,rhe
|=affected |l-7/libpng12=notaffected
--- Comment #21 from Huzaifa S. Sidhpurwala <huzaifas(a)redhat.com> ---
Based on the reproducer posted in comment #19, it seems that this issues does
only affects libpng-1.6. It does not affect older versions of libpng.
Statement:
Not Vulnerable. This issue does not affect the version of libpng as shipped
with Red Hat Enterprise Linux 5 and 6.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=XLgvHfJyQU&a=cc_unsubscribe
10 years, 3 months