Total vulnerabilities in the database
The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an IDAT chunk with a length of zero.
| Software | From | Fixed in |
|---|---|---|
| libpng / libpng | 1.6.0 | 1.6.0.x |
| libpng / libpng | 1.6.1 | 1.6.1.x |
| libpng / libpng | 1.6.3 | 1.6.3.x |
| libpng / libpng | 1.6.8 | 1.6.8.x |
| libpng / libpng | 1.6.9-beta | 1.6.9-beta.x |
| libpng / libpng | 1.6.0-beta | 1.6.0-beta.x |
| libpng / libpng | 1.6.4-beta | 1.6.4-beta.x |
| libpng / libpng | 1.6.7-beta | 1.6.7-beta.x |
| libpng / libpng | 1.6.1-beta | 1.6.1-beta.x |
| libpng / libpng | 1.6.6 | 1.6.6.x |
| libpng / libpng | 1.6.7 | 1.6.7.x |
| libpng / libpng | 1.6.9 | 1.6.9.x |
| libpng / libpng | 1.6.4 | 1.6.4.x |
| libpng / libpng | 1.6.3-beta | 1.6.3-beta.x |
| libpng / libpng | 1.6.2-beta | 1.6.2-beta.x |
| libpng / libpng | 1.6.2 | 1.6.2.x |
| libpng / libpng | 1.6.8-beta | 1.6.8-beta.x |
| libpng / libpng | 1.6.5 | 1.6.5.x |