Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Informations
Name CVE-2013-7353 First vendor Publication 2014-05-06
Vendor Cve Last vendor Modification 2016-12-31

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score 5 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Integer overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a crafted image, which triggers a heap-based buffer overflow.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7353

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-189 Numeric Errors (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:25151
 
Oval ID: oval:org.mitre.oval:def:25151
Title: SUSE-SU-2014:0724-1 -- Security update for libpng
Description: This libpng update fixes the following two overflow security issues. * bnc#873123: Fixed integer overflow that could have lead to a heap-based buffer overflow in png_set_sPLT() and png_set_text_2() (CVE-2013-7354). * bnc#873124: Fixed integer overflow that could have lead to a heap-based buffer overflow in png_set_unknown_chunks() (CVE-2013-7353).
Family: unix Class: patch
Reference(s): SUSE-SU-2014:0724-1
CVE-2013-7354
CVE-2013-7353
Version: 3
Platform(s): SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Desktop 11
Product(s): libpng
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 947

Nessus® Vulnerability Scanner

Date Description
2015-03-30 Name : The remote Mandriva Linux host is missing one or more security updates.
File : mandriva_MDVSA-2015-071.nasl - Type : ACT_GATHER_INFO
2014-08-15 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201408-06.nasl - Type : ACT_GATHER_INFO
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2014-345.nasl - Type : ACT_GATHER_INFO
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2014-347.nasl - Type : ACT_GATHER_INFO
2014-06-10 Name : The remote Fedora host is missing a security update.
File : fedora_2014-6892.nasl - Type : ACT_GATHER_INFO
2014-05-28 Name : The remote SuSE 11 host is missing one or more security updates.
File : suse_11_libpng-devel-140428.nasl - Type : ACT_GATHER_INFO
2014-05-13 Name : The remote Mandriva Linux host is missing one or more security updates.
File : mandriva_MDVSA-2014-084.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/67345
CONFIRM http://sourceforge.net/p/libpng/bugs/199/
MLIST http://seclists.org/oss-sec/2014/q2/83
SUSE http://lists.opensuse.org/opensuse-updates/2014-05/msg00015.html

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
Date Informations
2020-09-10 01:10:05
  • Multiple Updates
2020-05-24 01:13:04
  • Multiple Updates
2020-05-23 00:39:07
  • Multiple Updates
2019-07-19 12:03:00
  • Multiple Updates
2019-07-18 12:05:41
  • Multiple Updates
2017-03-08 12:01:10
  • Multiple Updates
2016-12-31 09:24:20
  • Multiple Updates
2016-04-27 00:00:21
  • Multiple Updates
2015-03-31 13:28:05
  • Multiple Updates
2014-08-16 13:27:15
  • Multiple Updates
2014-06-14 13:36:47
  • Multiple Updates
2014-06-11 13:24:25
  • Multiple Updates
2014-05-29 13:23:33
  • Multiple Updates
2014-05-14 13:24:39
  • Multiple Updates
2014-05-12 21:24:23
  • Multiple Updates
2014-05-07 00:23:36
  • Multiple Updates
2014-05-06 21:24:40
  • First insertion