Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2008-5907

Published: 15 January 2009

The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0' character constant to a NULL pointer. NOTE: some sources incorrectly report this as a double free vulnerability.

Notes

AuthorNote
mdeslaur
This may not be a security issue, as it seems it's when writing png
see: http://openwall.com/lists/oss-security/2009/01/09/1

Priority

Low

Status

Package Release Status
libpng
Launchpad, Ubuntu, Debian
upstream
Released (1.2.35-1)
dapper
Released (1.2.8rel-5ubuntu0.4)
gutsy
Released (1.2.15~beta5-2ubuntu0.2)
hardy
Released (1.2.15~beta5-3ubuntu0.1)
intrepid
Released (1.2.27-1ubuntu0.1)