PatchTheCVEgreg roelofs vulnerabilities
Recent CVEs affecting greg roelofs products. 12 tracked.
greg roelofs has 12 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2012-01-17. Highest priority: CVE-2004-0597 (score 70/100).
- CVE-2011-3328 LOW 2.6 DOWNGRADE The png_handle_cHRM function in pngrutil.c in libpng 1.5.4, when color-correction support is enabled, allows r
- CVE-2006-5793 LOW 2.6 DOWNGRADE The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through 1.2.12 uses a sizeof
- CVE-2006-3334 HIGH 7.5 UPGRADE Buffer overflow in the png_decompress_chunk function in pngrutil.c in libpng before 1.2.12 allows context-depe
- CVE-2006-0481 MEDIUM 5.0 DOWNGRADE Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to
- CVE-2005-3662 MEDIUM 4.6 DOWNGRADE Off-by-one buffer overflow in pnmtopng before 2.39, when using the -alpha command line option (Alphas_Of_Color
- CVE-2004-0768 HIGH 7.5 DOWNGRADE libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attacker
- CVE-2004-0599 MEDIUM 5.0 UPGRADE Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c
- CVE-2004-0598 MEDIUM 5.0 UPGRADE The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service
- CVE-2004-0597 HIGH 10.0 UPGRADE DOWNGRADE Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to
- CVE-2002-1363 HIGH 7.5 DOWNGRADE Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which a
- CVE-2002-0728 MEDIUM 5.0 DOWNGRADE Buffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14, allows attac
- CVE-2002-0660 HIGH 7.5 DOWNGRADE DOWNGRADE Buffer overflow in libpng 1.0.12-3.woody.2 and libpng3 1.2.1-1.1.woody.2 on Debian GNU/Linux 3.0, and other op
FAQ
How do I fix greg roelofs vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is greg roelofs being exploited right now?
None of the tracked greg roelofs CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which greg roelofs CVE should I patch first?
CVE-2004-0597 currently ranks highest (70/100): Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to.