Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

libpng libpng 1.0.14 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2002-0728
Buffer overflow in the progressive reader for libpng 1.2.x prior to 1.2.4, and 1.0.x prior to 1.0.14, allows malicious users to cause a denial of service (crash) via a PNG data stream that has more IDAT data than indicated by the IHDR chunk.
Greg Roelofs Libpng 1.2.4Greg Roelofs Libpng 1.0.14
5
CVSSv2
CVE-2004-0421
The Portable Network Graphics library (libpng) 1.0.15 and previous versions allows malicious users to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.
Openpkg Openpkg 2.0Libpng Libpng 1.2.2Libpng Libpng 1.0.8Libpng Libpng 1.2.4Libpng Libpng 1.0.14Libpng Libpng 1.2.0Openpkg Openpkg 1.3Libpng Libpng 1.0.11Libpng Libpng 1.0.9Libpng Libpng 1.0.13Libpng Libpng 1.0.6Libpng Libpng 1.0.7Libpng Libpng 1.2.3Libpng Libpng 1.0.5Libpng Libpng 1.2.1Redhat Libpng 1.2.2-16Libpng Libpng 1.0.12Libpng Libpng 1.2.5Libpng Libpng 1.0.0Redhat Libpng 1.2.2-20Libpng Libpng 1.0.10Trustix Secure Linux 2.0
4.3
CVSSv2
CVE-2009-2042
libpng prior to 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote malicious users to read portions of sensitive memory via &q...
Libpng Libpng 0.89cLibpng Libpng 1.0.11Libpng Libpng 1.0.13Libpng Libpng 1.0.15Libpng Libpng 1.0.16Libpng Libpng 1.0.2Libpng Libpng 1.0.22Libpng Libpng 1.2.18Libpng Libpng 1.2.1Libpng Libpng 1.2.17Libpng Libpng 1.2.16Libpng Libpng 1.2.13Libpng Libpng 1.2.19Libpng Libpng 1.2.10Libpng Libpng 1.0.8Libpng Libpng 1.0.9Libpng Libpng 1.2.14Libpng Libpng 1.2.15Libpng Libpng 1.2.11Libpng Libpng 1.2.23Libpng Libpng 1.2.24Libpng Libpng 1.2.22
7.5
CVSSv2
CVE-2008-1382
libpng 1.0.6 up to and including 1.0.32, 1.2.0 up to and including 1.2.26, and 1.4.0beta01 up to and including 1.4.0beta19 allows context-dependent malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a PNG file with zero length "unkno...
Libpng Libpng 1.0.12Libpng Libpng 1.0.15Libpng Libpng 1.0.16Libpng Libpng 1.0.19Libpng Libpng 1.0.20Libpng Libpng 1.0.23Libpng Libpng 1.0.25Libpng Libpng 1.0.26Libpng Libpng 1.0.27Libpng Libpng 1.0.28Libpng Libpng 1.0.29Libpng Libpng 1.0.6Libpng Libpng 1.0.7Libpng Libpng 1.0.8Libpng Libpng 1.0.9Libpng Libpng 1.2.0Libpng Libpng 1.2.1Libpng Libpng 1.2.10Libpng Libpng 1.2.11Libpng Libpng 1.2.13Libpng Libpng 1.2.14Libpng Libpng 1.2.15
5
CVSSv2
CVE-2006-7244
Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions prior to 1.2.15beta3, allows context-dependent malicious users to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length.
Libpng Libpng 1.0.37Libpng Libpng 1.2.14Libpng Libpng 1.2.11Libpng Libpng 1.0.6Libpng Libpng 1.0.23Libpng Libpng 1.0.41Libpng Libpng 1.0.9Libpng Libpng 1.0.15Libpng Libpng 1.2.0Libpng Libpng 1.0.10Libpng Libpng 1.2.10Libpng Libpng 1.0.7Libpng Libpng 1.0.46Libpng Libpng 1.0.17Libpng Libpng 1.0.29Libpng Libpng 1.2.1Libpng Libpng 1.0.27Libpng Libpng 1.0.1Libpng Libpng 1.0.8Libpng Libpng 1.0.12Libpng Libpng 1.0.31Libpng Libpng 1.0.14
7.5
CVSSv2
CVE-2002-1363
Portable Network Graphics (PNG) library libpng 1.2.5 and previous versions does not correctly calculate offsets, which allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a buffer overflow attack on the row buffers.
Greg Roelofs Libpng 1.0.13Greg Roelofs Libpng 1.0.14Greg Roelofs Libpng 1.2.1Greg Roelofs Libpng 1.2.2Greg Roelofs Libpng 1.2.3Greg Roelofs Libpng 1.0.7Greg Roelofs Libpng 1.0.8Greg Roelofs Libpng 1.0.5Greg Roelofs Libpng 1.0.6Greg Roelofs Libpng 1.2.4Greg Roelofs Libpng 1.0.11Greg Roelofs Libpng 1.0.12Greg Roelofs Libpng 1.0.9Greg Roelofs Libpng 1.2.0
6.8
CVSSv2
CVE-2011-3048
The png_set_text_2 function in pngset.c in libpng 1.0.x prior to 1.0.59, 1.2.x prior to 1.2.49, 1.4.x prior to 1.4.11, and 1.5.x prior to 1.5.10 allows remote malicious users to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image fi...
Libpng Libpng 1.0.57Libpng Libpng 1.0.56Libpng Libpng 1.0.50Libpng Libpng 1.0.48Libpng Libpng 1.0.41Libpng Libpng 1.0.40Libpng Libpng 1.0.32Libpng Libpng 1.0.31Libpng Libpng 1.0.30Libpng Libpng 1.0.23Libpng Libpng 1.0.22Libpng Libpng 1.0.1Libpng Libpng 1.0.0Libpng Libpng 1.0.8Libpng Libpng 1.0.7Libpng Libpng 1.0.58Libpng Libpng 1.0.54Libpng Libpng 1.0.53Libpng Libpng 1.0.45Libpng Libpng 1.0.44Libpng Libpng 1.0.37Libpng Libpng 1.0.35
4.3
CVSSv2
CVE-2012-3425
The png_push_read_zTXt function in pngpread.c in libpng 1.0.x prior to 1.0.58, 1.2.x prior to 1.2.48, 1.4.x prior to 1.4.10, and 1.5.x prior to 1.5.10 allows remote malicious users to cause a denial of service (out-of-bounds read) via a large avail_in field value in a PNG image.
Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 15.10Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Libpng Libpng 1.4.9Libpng Libpng 1.4.4Libpng Libpng 1.4.7Libpng Libpng 1.4.1Libpng Libpng 1.4.2Libpng Libpng 1.4.0Libpng Libpng 1.4.6Libpng Libpng 1.4.5Libpng Libpng 1.4.3Libpng Libpng 1.4.8Opensuse Opensuse 11.4Opensuse Opensuse 12.1Libpng Libpng 1.2.14Libpng Libpng 1.2.45Libpng Libpng 1.2.46Libpng Libpng 1.2.33Libpng Libpng 1.2.16Libpng Libpng 1.2.35
9.3
CVSSv2
CVE-2015-8540
Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 up to and including 0.99, 1.0.x prior to 1.0.66, 1.1.x and 1.2.x prior to 1.2.56, 1.3.x and 1.4.x prior to 1.4.19, and 1.5.x prior to 1.5.26 allows remote malicious users to have unspecified impact v...
Redhat Enterprise Linux Desktop Supplementary 6.0Redhat Enterprise Linux Server Supplementary 6.0Redhat Enterprise Linux Hpc Node 6.0Redhat Enterprise Linux Workstation Supplementary 6.0Redhat Enterprise Linux Server Supplementary 5.0Redhat Enterprise Linux Desktop Supplementary 5.0Libpng Libpng 1.2.14Libpng Libpng 1.2.45Libpng Libpng 1.2.46Libpng Libpng 1.2.33Libpng Libpng 1.2.16Libpng Libpng 1.2.35Libpng Libpng 1.2.29Libpng Libpng 1.2.26Libpng Libpng 1.2.54Libpng Libpng 1.2.7Libpng Libpng 1.2.43Libpng Libpng 1.2.2Libpng Libpng 1.2.4Libpng Libpng 1.2.22Libpng Libpng 1.2.39Libpng Libpng 1.2.48
5
CVSSv2
CVE-2016-10087
The png_set_text_2 function in libpng 0.71 prior to 1.0.67, 1.2.x prior to 1.2.57, 1.4.x prior to 1.4.20, 1.5.x prior to 1.5.28, and 1.6.x prior to 1.6.27 allows context-dependent malicious users to cause a NULL pointer dereference vectors involving loading a text chunk into a pn...
Libpng Libpng 1.0.5gLibpng Libpng 1.0.37Libpng Libpng 0.99eLibpng Libpng 0.98Libpng Libpng 1.0.4dLibpng Libpng 1.0.41Libpng Libpng 1.0.0bLibpng Libpng 1.0.1bLibpng Libpng 1.0.46Libpng Libpng 0.99dLibpng Libpng 1.0.4cLibpng Libpng 1.0.65Libpng Libpng 1.0.5tLibpng Libpng 1.0.1Libpng Libpng 1.0.4eLibpng Libpng 1.0.1cLibpng Libpng 1.0.8Libpng Libpng 0.81Libpng Libpng 1.0.5nLibpng Libpng 0.88Libpng Libpng 1.0.6fLibpng Libpng 1.0.5k
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook