Off-by-one error in the png_formatted_warning function in pngerror.c in libpng 1.5.4 up to and including 1.5.7 might allow remote malicious users to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified vectors, which trigger a stack-based buffer overflow.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
libpng libpng 1.5.4 |
||
libpng libpng 1.5.5 |
||
libpng libpng 1.5.6 |
||
libpng libpng 1.5.2 |
||
libpng libpng 1.5.3 |
||
libpng libpng 1.5.7 |
||
libpng libpng 1.5.0 |
||
libpng libpng 1.5.1 |
Vulmon