CVE-2014-0333

EPSS 0.76%

發布日:2014/2/27修改日:2026/4/28

也稱為:DEBIAN-CVE-2014-0333

描述

The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an IDAT chunk with a length of zero.

受影響套件(1)

Debian/libpng1.6from 0, < 1.6.10-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-0333