1.4.13

DATE	CVE	VULNERABILITY TITLE	RISK
2014-05-06	CVE-2013-7353	Numeric Errors vulnerability in Libpng Integer overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a crafted image, which triggers a heap-based buffer overflow. network low complexity libpng CWE-189	5.0
2014-01-12	CVE-2013-6954	Denial of Service vulnerability in libpng 'png_read_transform_info()' Function NULL Pointer Dereference The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c. network low complexity libpng	5.0