Mozilla Foundation Security Advisory 2012-11
libpng integer overflow
- Announced
- February 16, 2012
- Impact
- Critical
- Products
- Firefox, Firefox ESR, SeaMonkey, Thunderbird, Thunderbird ESR
- Fixed in
-
- Firefox 10.0.2
- Firefox 3.6.27
- Firefox ESR 10.0.2
- SeaMonkey 2.7.2
- Thunderbird 10.0.2
- Thunderbird 3.1.19
- Thunderbird ESR 10.0.2
Description
An integer overflow in the libpng library can lead to a heap-buffer overflow when decompressing certain PNG images. This leads to a crash, which may be potentially exploitable.