Vulnerability in PNG Processing Could Allow Remote Code Execution

Vulnerabilities exist because of the way the affected software handles PNG files.

ITPro Today

February 8, 2005

1 Min Read
ITPro Today logo

ReportedFebruary 8, 2005 by Microsoft

VERSIONS AFFECTED


DESCRIPTION

Vulnerabilities existbecause of the way the affected software handles PNG files. A remoteintruder could use malicious Web content that contains corrupt ormalformed PNG files to execute codeon the affected system. Asuccessful exploit could allow the intruder to take complete controlof the system.

VENDOR RESPONSE

Microsoft has releasedSecurity Bulletin MS05-009, "Vulnerabilityin PNG Processing Could Allow Remote Code Execution (890261),"and a patch to correct the problem.

CREDIT
Carlos Sarrauteof Core Security Technologies


Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like