CVE-2013-7353 in libpng
Summary
Integer overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a crafted image, which triggers a heap-based buffer overflow.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
04/10/2014
Disclosure
05/06/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13212 | libpng Image pngset.c png_set_unknown_chunks numeric error | 189 | Unproven | Official fix | CVE-2013-7353 |