Published: 10/01/2015 Updated: 18/10/2016

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in the png_combine_row function in libpng prior to 1.5.21 and 1.6.x prior to 1.6.16, when running on 64-bit systems, might allow context-dependent malicious users to execute arbitrary code via a "very wide interlaced" PNG image.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple mac os x
libpng libpng 1.6.0
libpng libpng 1.6.4
libpng libpng 1.6.9
libpng libpng 1.6.14
libpng libpng 1.6.2
libpng libpng 1.6.7
libpng libpng 1.6.11
libpng libpng 1.6.12
libpng libpng
libpng libpng 1.6.1
libpng libpng 1.6.5
libpng libpng 1.6.6
libpng libpng 1.6.10
libpng libpng 1.6.15
libpng libpng 1.6.3
libpng libpng 1.6.8
libpng libpng 1.6.13

Heap-based buffer overflow in the png_combine_row function in libpng before 1521 and 16x before 1616, when running on 64-bit systems, might allow context-dependent attackers to execute arbitrary code via a "very wide interlaced" PNG image ...

WiiU-Vulns libpng: wwwcvedetailscom/cve/CVE-2014-9495/ (100!) libjpeg-turbo wwwcvedetailscom/cve/CVE-2016-3616/ (68)

CWE-119 http://www.securitytracker.com/id/1031444 http://www.openwall.com/lists/oss-security/2015/01/04/3 http://www.securityfocus.com/bid/71820 http://sourceforge.net/p/png-mng/mailman/message/33173461/http://www.openwall.com/lists/oss-security/2015/01/10/1 http://sourceforge.net/p/png-mng/mailman/message/33172831/http://www.openwall.com/lists/oss-security/2015/01/10/3 http://secunia.com/advisories/62725 https://support.apple.com/HT206167 http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html https://nvd.nist.gov https://github.com/NotANullPointer/WiiU-Vulns https://access.redhat.com/security/cve/cve-2014-9495

CVE-2014-9495

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect