CVE-2012-3425
Fixed in a distro release EPSS 3%
The png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48, 1.4.x before 1.4.10, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large avail_in field value in a PNG image.
Products: canonical ubuntu_linux, libpng, opensuse, redhat libpng, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | libpng | 1.2.44-1+squeeze6 |
| Ubuntu 14.04 LTS | libpng | 1.2.50-1ubuntu2.14.04.1 |