Published: 30/06/2010 Updated: 13/02/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Memory leak in pngrutil.c in libpng prior to 1.2.44, and 1.4.x prior to 1.4.3, allows remote malicious users to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libpng libpng
apple itunes
apple safari
apple iphone os
apple tvos
fedoraproject fedora 13
fedoraproject fedora 12
suse linux enterprise server 10
opensuse opensuse 11.1
suse linux enterprise server 11
suse linux enterprise server 9
opensuse opensuse 11.2
vmware player
vmware workstation
canonical ubuntu linux 9.04
canonical ubuntu linux 9.10
canonical ubuntu linux 10.04
canonical ubuntu linux 8.04
canonical ubuntu linux 6.06
debian debian linux 5.0

Debian Bug report logs - #587670 libpng: CVE-2010-1205 and CVE-2010-2249 Package: src:libpng; Maintainer for src:libpng is Anibal Monsalve Salazar <anibal@debianorg>; Reported by: Raphael Geissert <geissert@debianorg> Date: Wed, 30 Jun 2010 19:12:01 UTC Severity: grave Tags: security Fixed in versions 1244-1, li ...

It was discovered that libpng did not properly handle certain malformed PNG images If a user or automated system were tricked into opening a crafted PNG file, an attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program (CVE-2010-1205) ...

Several vulnerabilities have been discovered in libpng, a library for reading and writing PNG files The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2010-1205 It was discovered a buffer overflow in libpng which allows remote attackers to execute arbitrary code via a PNG image that triggers an add ...

CWE-401 https://bugzilla.redhat.com/show_bug.cgi?id=608644 http://secunia.com/advisories/40302 http://www.vupen.com/english/advisories/2010/1612 http://www.libpng.org/pub/png/libpng.html http://www.securityfocus.com/bid/41174 http://www.ubuntu.com/usn/USN-960-1 http://www.vupen.com/english/advisories/2010/1755 http://secunia.com/advisories/40472 http://www.vupen.com/english/advisories/2010/1877 http://www.debian.org/security/2010/dsa-2072 http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044397.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:133 http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044283.html http://www.vupen.com/english/advisories/2010/1837 http://www.vupen.com/english/advisories/2010/1846 http://secunia.com/advisories/40547 http://secunia.com/advisories/41574 http://www.vupen.com/english/advisories/2010/2491 http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html http://www.vmware.com/security/advisories/VMSA-2010-0014.html http://lists.vmware.com/pipermail/security-announce/2010/000105.html http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html http://support.apple.com/kb/HT4435 http://support.apple.com/kb/HT4456 http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html http://www.vupen.com/english/advisories/2010/3046 http://support.apple.com/kb/HT4457 http://www.vupen.com/english/advisories/2010/3045 http://secunia.com/advisories/42314 http://www.securitytracker.com/id?1024723 http://secunia.com/advisories/42317 http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html http://support.apple.com/kb/HT4554 http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html http://support.apple.com/kb/HT4566 http://secunia.com/advisories/40336 http://www.vupen.com/english/advisories/2010/1637 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.613061 https://exchange.xforce.ibmcloud.com/vulnerabilities/59816 http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=90cfcecc09febb8d6c8c1d37ea7bb7cf0f4b00f3#patch20 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=587670 https://usn.ubuntu.com/960-1/

CVE-2010-2249

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect