CVEvulnerability

CVE-2015-8540

8.8 HIGH Published 2016-04-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-04-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-189

Description

Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.

Affected configurations

• redhat enterprise linux desktop supplementary 5.0 • redhat enterprise linux desktop supplementary 6.0 • redhat enterprise linux hpc node 6.0 • redhat enterprise linux server supplementary 5.0 • redhat enterprise linux server supplementary 6.0 • redhat enterprise linux workstation supplementary 6.0 • libpng libpng 1.2.0 • libpng libpng 1.2.1 • libpng libpng 1.2.2 • libpng libpng 1.2.3 • libpng libpng 1.2.4 • libpng libpng 1.2.5 • libpng libpng 1.2.6 • libpng libpng 1.2.7 • libpng libpng 1.2.8 • libpng libpng 1.2.9 • libpng libpng 1.2.10 • libpng libpng 1.2.11 • libpng libpng 1.2.12 • libpng libpng 1.2.13 • libpng libpng 1.2.14 • libpng libpng 1.2.15 • libpng libpng 1.2.16 • libpng libpng 1.2.17 • libpng libpng 1.2.18 • libpng libpng 1.2.19 • libpng libpng 1.2.20 • libpng libpng 1.2.21 • libpng libpng 1.2.22 • libpng libpng 1.2.23 • libpng libpng 1.2.24 • libpng libpng 1.2.25 • libpng libpng 1.2.26 • libpng libpng 1.2.27 • libpng libpng 1.2.28 • libpng libpng 1.2.29 • libpng libpng 1.2.30 • libpng libpng 1.2.31 • libpng libpng 1.2.32 • libpng libpng 1.2.33 • libpng libpng 1.2.34 • libpng libpng 1.2.35 • libpng libpng 1.2.36 • libpng libpng 1.2.37 • libpng libpng 1.2.38 • libpng libpng 1.2.39 • libpng libpng 1.2.40 • libpng libpng 1.2.41 • libpng libpng 1.2.42 • libpng libpng 1.2.43 • libpng libpng 1.2.44 • libpng libpng 1.2.45 • libpng libpng 1.2.46 • libpng libpng 1.2.47 • libpng libpng 1.2.48 • libpng libpng 1.2.49 • libpng libpng 1.2.50 • libpng libpng 1.2.51 • libpng libpng 1.2.52 • libpng libpng 1.2.53 … and 120 more

Related

Weakness · not in database (1)

References