CVE-2010-1205

Published: Jun 30, 2010Modified: Apr 29, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.

Affected (31)

Products: Libpng: Libpng · Google: Chrome · Apple: Iphone Os, Itunes, Mac Os X, Mac Os X Server, Safari · +7 more

Show all products

Libpng: Libpng · Google: Chrome · Apple: Iphone Os, Itunes, Mac Os X, Mac Os X Server, Safari · Fedoraproject: Fedora · Opensuse: Opensuse · Suse: Linux Enterprise Server · Vmware: Player, Workstation · Canonical: Ubuntu Linux · Debian: Debian Linux · Mozilla: Firefox, Seamonkey, Thunderbird

1 product

1 product

5 products

1 product

1 product

1 product

Linux Enterprise Server

2 products

1 product

1 product

3 products

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Libpng Libpng	Before 1.2.44
Libpng Libpng	From 1.4.0 to 1.4.3

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Google Chrome	Before 5.0.375.99

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	From 2.0 to 4.1
Apple Itunes	Before 10.2
Apple Mac Os X	From 10.6.0 to 10.6.4
Apple Mac Os X Server	From 10.6.0 to 10.6.4
Apple Safari	Before 5.0.4

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 12
Fedoraproject Fedora	Version 13

Configuration E

6 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.1
Opensuse Opensuse	Version 11.2
Suse Linux Enterprise Server	Version 10 sp3
Suse Linux Enterprise Server	Version 11
Suse Linux Enterprise Server	Version 11 sp1
Suse Linux Enterprise Server	Version 9

Configuration F

4 vulnerable

Vulnerable Software	Affected Versions
Vmware Player	From 2.5 to 2.5.5
Vmware Player	From 3.1 to 3.1.2
Vmware Workstation	From 6.5.0 to 6.5.5
Vmware Workstation	From 7.1 to 7.1.2

Configuration G

5 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 9.04
Canonical Ubuntu Linux	Version 9.10

Configuration H

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 5.0

Configuration I

5 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Before 3.5.11
Mozilla Firefox	From 3.5.12 to 3.6.7
Mozilla Seamonkey	Before 2.0.6
Mozilla Thunderbird	Before 3.0.6
Mozilla Thunderbird	From 3.0.7 to 3.1.1

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (98)

http://blackberry.com/btsc/KB27244

Source: cve@mitre.org

Broken Link

http://code.google.com/p/chromium/issues/detail?id=45983

Source: cve@mitre.org

ExploitIssue TrackingMailing ListThird Party Advisory

http://googlechromereleases.blogspot.com/2010/07/stable-channel-update.html

Source: cve@mitre.org

Release NotesThird Party Advisory

http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=188eb6b42602bf7d7ae708a21897923b6a83fe7c#patch18

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044283.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044397.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.vmware.com/pipermail/security-announce/2010/000105.html

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://secunia.com/advisories/40302

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/40336

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/40472

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/40547

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/41574

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/42314

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/42317

Source: cve@mitre.org

Broken Link

http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.613061

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://support.apple.com/kb/HT4312

Source: cve@mitre.org

Third Party Advisory

http://support.apple.com/kb/HT4435

Source: cve@mitre.org

Broken Link

http://support.apple.com/kb/HT4456

Source: cve@mitre.org

Third Party Advisory

http://support.apple.com/kb/HT4457

Source: cve@mitre.org

Third Party Advisory

http://support.apple.com/kb/HT4554

Source: cve@mitre.org

Third Party Advisory

http://support.apple.com/kb/HT4566

Source: cve@mitre.org

Broken Link

http://trac.webkit.org/changeset/61816

Source: cve@mitre.org

PatchThird Party Advisory

http://www.debian.org/security/2010/dsa-2072

Source: cve@mitre.org

Third Party Advisory

http://www.libpng.org/pub/png/libpng.html

Source: cve@mitre.org

ProductVendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2010:133

Source: cve@mitre.org

Broken Link

http://www.mozilla.org/security/announce/2010/mfsa2010-41.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/41174

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-960-1

Source: cve@mitre.org

Third Party Advisory

http://www.vmware.com/security/advisories/VMSA-2010-0014.html

Source: cve@mitre.org

PatchThird Party Advisory

http://www.vupen.com/english/advisories/2010/1612

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2010/1637

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2010/1755

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2010/1837

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2010/1846

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2010/1877

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2010/2491

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2010/3045

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2010/3046

Source: cve@mitre.org

Broken Link

https://bugs.webkit.org/show_bug.cgi?id=40798

Source: cve@mitre.org

Permissions RequiredThird Party Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=570451

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=608238

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/59815

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11851

Source: cve@mitre.org

Third Party Advisory

http://blackberry.com/btsc/KB27244