Oval Definition:	oval:com.ubuntu.precise:def:20158126000
Revision Date: 2015-11-12 Version: 1 Title: CVE-2015-8126 on Ubuntu 12.04 LTS (precise) - medium. Description: Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. Family: unix Class: vulnerability Status: Reference(s): CVE-2015-8126 Platform(s): Ubuntu 12.04 LTS Product(s): Definition Synopsis Ubuntu 12.04 LTS (precise) is installed. AND Package Information NOT While related to the CVE in some way, the 'chromium-browser' package in precise is not affected (note: 'uses system libpng'). OR NOT While related to the CVE in some way, the 'firefox' package in precise is not affected (note: 'doesn't use png_set_PLTE, see https://bugzilla.mozilla.org/show_bug.cgi?id=1224244#c0'). OR The 'libpng' package in precise was vulnerable but has been fixed (note: '1.2.46-3ubuntu4.1'). OR NOT While related to the CVE in some way, the 'openjdk-6' package in precise is not affected (note: 'uses system libpng'). OR NOT While related to the CVE in some way, the 'openjdk-7' package in precise is not affected (note: 'uses system libpng'). OR NOT While related to the CVE in some way, the 'thunderbird' package in precise is not affected (note: 'doesn't use png_set_PLTE, see https://bugzilla.mozilla.org/show_bug.cgi?id=1224244#c0').
BACK