[Png-mng-security] vulnerability in png_decompress_chunk()

Glenn Randers-Pehrson glennrp at gmail.com
Sat Feb 6 13:18:46 UTC 2010


The existence of this bug has been inadvertently leaked to the public
png-mng-implement list.

Even though the message body doesn't say anything about the bug, the subject

Subject: RE: [png-mng-implement] [Png-mng-security] vulnerability in
png_decompress_chunk()

seems to give enough information for a determined cracker to figure it out in
short order.

Glenn



More information about the png-mng-security-archive mailing list