{"vulnerability": "CVE-2013-6954", "sightings": [{"uuid": "9d2760b6-29a5-480c-8e18-f52becb108aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-6954", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17877", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2013-6954\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.\n\ud83d\udccf Published: 2014-01-12T15:00:00.000Z\n\ud83d\udccf Modified: 2025-06-10T13:18:13.099Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/docview.wss?uid=swg21675973\n2. https://access.redhat.com/errata/RHSA-2014:0414\n3. http://security.gentoo.org/glsa/glsa-201406-32.xml\n4. http://advisories.mageia.org/MGASA-2014-0075.html\n5. http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128098.html\n6. http://lists.opensuse.org/opensuse-updates/2014-01/msg00071.html\n7. http://marc.info/?l=bugtraq&m=140852886808946&w=2\n8. http://www-01.ibm.com/support/docview.wss?uid=swg21672080\n9. http://sourceforge.net/p/libpng/code/ci/1faa6ff32c648acfe3cf30a58d31d7aebc24968c\n10. http://www.kb.cert.org/vuls/id/650142\n11. https://access.redhat.com/errata/RHSA-2014:0413\n12. http://secunia.com/advisories/59058\n13. http://marc.info/?l=bugtraq&m=140852886808946&w=2\n14. http://marc.info/?l=bugtraq&m=140852974709252&w=2\n15. http://www.securityfocus.com/bid/64493\n16. http://secunia.com/advisories/58974\n17. http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html\n18. https://bugzilla.redhat.com/show_bug.cgi?id=1045561\n19. http://www.mandriva.com/security/advisories?name=MDVSA-2014:035\n20. http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127947.html\n21. http://marc.info/?l=bugtraq&m=140852974709252&w=2\n22. http://www-01.ibm.com/support/docview.wss?uid=swg21676746\n23. http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128099.html\n24. http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127952.html\n25. http://www.libpng.org/pub/png/libpng.html\n26. http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128114.html\n27. http://sourceforge.net/projects/libpng/files/libpng16/1.6.8/", "creation_timestamp": "2025-06-10T13:30:03.000000Z"}]}