Slashdot Mirror

← Back to Stories (view on slashdot.org)

CERT Warns Of Multiple Vulnerabilities In Libpng

Posted by simoniker on from the puh-nug-guh dept.

jefftp writes "CERT announced today that there are several vulnerabilities in libpng, one is a buffer overflow which could potentially cause a PNG image file to execute arbitrary code. Libpng release 1.2.6rc1 addresses the problems covered by this CERT announcement, and can be obtained from the libpng Sourceforge project. A fully tested version is to be released in the next few weeks."

4 of 259 comments (clear)

  1. Ah-ha! by iamdrscience · · Score: 5, Funny

    You all complained about Internet Explorer not being able to display PNGs correctly, but who's laughing now! Obviously they broke PNG support intentionally for security reasons. Once again, Microsoft comes through on the cutting edge.

  2. Re:php ! by Anonymous Coward · · Score: 5, Funny

    Seriously, we need a "Dumbass" mod option

  3. Re:Mozilla by Theril · · Score: 5, Funny

    Sure it could. Implement image loading and rendering in Java and nobody has patience to load images anymore.

  4. Re:Old news by LiquidCoooled · · Score: 5, Funny

    "Submissions review procedure" ?

    Taco: "Wooah! this Doom 3 is excellent!!!!"

    Michael: "Anyone else gettin 503s?"

    Simoniker: "Is anybody doing ANY work?"

    Tim: "Simon - yer, just gettin submissions - omg, another 400"

    Taco: "Die scum die!!"

    Michael: "I give up, anyone wanna 7up?"

    Taco [Looking up from game for a minute] "Yer go on then!"

    Taco: "Tim, Throw another story onto the site, the natives are gettin restless."

    Tim: "eeny, meeny miny mo...."

    --
    liqbase :: faster than paper