CVE-2009-0040

Published: Feb 22, 2009Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.

Affected (15)

Products: Libpng: Libpng · Apple: Iphone Os, Mac Os X · Opensuse: Opensuse · +3 more

Show all products

Libpng: Libpng · Apple: Iphone Os, Mac Os X · Opensuse: Opensuse · Suse: Linux Enterprise, Linux Enterprise Desktop, Linux Enterprise Server · Debian: Debian Linux · Fedoraproject: Fedora

1 product

2 products

1 product

3 products

Linux Enterprise Desktop

Linux Enterprise Server

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Libpng Libpng	Before 1.0.43
Libpng Libpng	From 1.2.0 to 1.2.35

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Before 3.0
Apple Mac Os X	Before 10.5.8

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 10.3
Opensuse Opensuse	Version 11.0
Opensuse Opensuse	Version 11.1
Suse Linux Enterprise	Version 10.0
Suse Linux Enterprise	Version 9.0
Suse Linux Enterprise Desktop	Version 10 sp2
Suse Linux Enterprise Server	Version 10 sp2

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 4.0
Debian Debian Linux	Version 5.0

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 10
Fedoraproject Fedora	Version 9

Related CWEs

CWE-824

Access of Uninitialized Pointer

The product accesses or uses a pointer that has not been initialized.

References (164)

ftp://ftp.simplesystems.org/pub/png/src/libpng-1.2.34-ADVISORY.txt (unsafe URL)

Source: secalert@redhat.com

Broken LinkVendor Advisory

http://downloads.sourceforge.net/libpng/libpng-1.2.34-ADVISORY.txt

Source: secalert@redhat.com

Product

http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html

Source: secalert@redhat.com

Mailing List

http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html

Source: secalert@redhat.com

Mailing List

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

Source: secalert@redhat.com

Mailing List

http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html

Source: secalert@redhat.com

Broken LinkMailing List

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html

Source: secalert@redhat.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html

Source: secalert@redhat.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html

Source: secalert@redhat.com

Mailing List

http://lists.vmware.com/pipermail/security-announce/2009/000062.html

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/33970

Source: secalert@redhat.com

Broken LinkVendor Advisory

http://secunia.com/advisories/33976

Source: secalert@redhat.com

Broken LinkVendor Advisory

http://secunia.com/advisories/34137

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/34140

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/34143

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/34145

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/34152

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/34210

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/34265

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/34272

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/34320

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/34324

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/34388

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/34462

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/34464

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/35074

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/35258

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/35302

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/35379

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/35386

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/36096

Source: secalert@redhat.com

Broken Link

http://security.gentoo.org/glsa/glsa-200903-28.xml

Source: secalert@redhat.com

Third Party Advisory

http://security.gentoo.org/glsa/glsa-201209-25.xml

Source: secalert@redhat.com

Third Party Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420

Source: secalert@redhat.com

Mailing List

http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952

Source: secalert@redhat.com

Mailing List

http://sourceforge.net/mailarchive/message.php?msg_name=e56ccc8f0902181726i200f4bf0n20d919473ec409b7%40mail.gmail.com

Source: secalert@redhat.com

Broken Link

http://sourceforge.net/project/shownotes.php?group_id=1689&release_id=662441

Source: secalert@redhat.com

Broken Link

http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1

Source: secalert@redhat.com

Broken Link

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1

Source: secalert@redhat.com

Broken Link

http://support.apple.com/kb/HT3549

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT3613

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT3639

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT3757

Source: secalert@redhat.com

Third Party Advisory

http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm

Source: secalert@redhat.com

Broken Link

http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm

Source: secalert@redhat.com

Broken Link

http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document

Source: secalert@redhat.com

Broken Link

http://wiki.rpath.com/Advisories:rPSA-2009-0046

Source: secalert@redhat.com

Broken Link

http://www.debian.org/security/2009/dsa-1750

Source: secalert@redhat.com

Mailing List

http://www.debian.org/security/2009/dsa-1830

Source: secalert@redhat.com

Mailing List

http://www.kb.cert.org/vuls/id/649212

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2009:051

Source: secalert@redhat.com

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2009:075

Source: secalert@redhat.com

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2009:083

Source: secalert@redhat.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2009-0315.html

Source: secalert@redhat.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2009-0325.html

Source: secalert@redhat.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2009-0333.html

Source: secalert@redhat.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2009-0340.html

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/archive/1/501767/100/0/threaded

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/503912/100/0/threaded

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/505990/100/0/threaded

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/33827

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/33990

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.us-cert.gov/cas/techalerts/TA09-133A.html

Source: secalert@redhat.com

Third Party AdvisoryUS Government Resource

http://www.us-cert.gov/cas/techalerts/TA09-218A.html

Source: secalert@redhat.com

Third Party AdvisoryUS Government Resource

http://www.vmware.com/security/advisories/VMSA-2009-0007.html

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2009/0469

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2009/0473

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2009/0632

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2009/1297

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2009/1451

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2009/1462

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2009/1522

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2009/1560

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2009/1621

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2009/2172

Source: secalert@redhat.com

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/48819

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10316

Source: secalert@redhat.com

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6458

Source: secalert@redhat.com

Broken Link

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00272.html

Source: secalert@redhat.com

Mailing List

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00412.html

Source: secalert@redhat.com

Mailing List

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html

Source: secalert@redhat.com

Mailing List

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html

Source: secalert@redhat.com

Mailing List

ftp://ftp.simplesystems.org/pub/png/src/libpng-1.2.34-ADVISORY.txt (unsafe URL)