Summary
Check the version of libpng16
Solution
Please Install the Updated Packages.
Insight
libpng was updated to fix some security issues:
* CVE-2014-9495 [bnc#912076]: Heap-buffer overflow png_combine_row() with very wide interlaced images
* CVE-2015-0973 [bnc#912929]: overflow in png_read_IDAT_data
libpng is now also build with -DPNG_SAFE_LIMITS_SUPPORTED.
Affected
libpng16 on openSUSE 13.1
Detection
Get the installed version with the help of detect NVT and check if the version is vulnerable or not.
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2014-9495, CVE-2015-0973 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities