Description
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
Affected products
- greg_roelofs / libpng31.2.0 – 1.2.0
- greg_roelofs / libpng31.2.1 – 1.2.1
- greg_roelofs / libpng31.2.2 – 1.2.2
- greg_roelofs / libpng31.2.3 – 1.2.3
- greg_roelofs / libpng31.2.4 – 1.2.4
- greg_roelofs / libpng31.2.5 – 1.2.5