CVEvulnerability

CVE-2010-1205

9.8 CRITICAL Published 2010-06-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-06-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-120

Description

Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.

Affected configurations

• libpng libpng (< 1.2.44) • libpng libpng (>= 1.4.0 < 1.4.3) • google chrome (< 5.0.375.99) • apple itunes (< 10.2) • apple safari (< 5.0.4) • apple iphone os (>= 2.0 <= 4.1) • apple mac os x (>= 10.6.0 < 10.6.4) • apple mac os x server (>= 10.6.0 < 10.6.4) • fedoraproject fedora 12 • fedoraproject fedora 13 • opensuse opensuse 11.1 • opensuse opensuse 11.2 • suse linux enterprise server 9 • suse linux enterprise server 10 • suse linux enterprise server 11 • vmware player (>= 2.5 < 2.5.5) • vmware player (>= 3.1 < 3.1.2) • vmware workstation (>= 6.5.0 < 6.5.5) • vmware workstation (>= 7.1 < 7.1.2) • canonical ubuntu linux 6.06 • canonical ubuntu linux 8.04 • canonical ubuntu linux 9.04 • canonical ubuntu linux 9.10 • canonical ubuntu linux 10.04 • debian debian linux 5.0 • mozilla firefox (< 3.5.11) • mozilla firefox (>= 3.5.12 < 3.6.7) • mozilla seamonkey (< 2.0.6) • mozilla thunderbird (< 3.0.6) • mozilla thunderbird (>= 3.0.7 < 3.1.1)

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References