The embedded libpng library is at version 1.2.7 which contains multiple vulnerabilities. Current version is libpng-1.2.14. Note that this affects all platforms except Mac OS X.
(see bug 13975)