Summary
The remote host is missing an update to libpng, libpng3 announced via advisory DSA 140-2.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20140-2
Insight
In addition to the advisory DSA 140-1 the packages below fix another potential buffer overflow. The PNG libraries implement a safety margin which is also included in a newer upstream release. Thanks to Glenn Randers-Pehrson for informing us.
This problem has been fixed in version 1.0.12-3.woody.2 of libpng and version 1.2.1-1.1.woody.2 of libpng3 for the current stable distribution (woody).
We recommend that you upgrade your libpng packages.
Severity
Classification
-
CVE CVE-2002-0660, CVE-2002-0728 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities