CVE-2010-2249

Published: Jun 30, 2010Modified: Apr 29, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks.

Affected (24)

Products: Libpng: Libpng · Apple: Iphone Os, Itunes, Safari, Tvos · Fedoraproject: Fedora · +5 more

Show all products

Libpng: Libpng · Apple: Iphone Os, Itunes, Safari, Tvos · Fedoraproject: Fedora · Opensuse: Opensuse · Suse: Linux Enterprise Server · Vmware: Player, Workstation · Canonical: Ubuntu Linux · Debian: Debian Linux

1 product

4 products

1 product

1 product

1 product

Linux Enterprise Server

2 products

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Libpng Libpng	Before 1.2.44
Libpng Libpng	From 1.4.0 to 1.4.3

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	From 2.0 to 4.1
Apple Itunes	Before 10.2
Apple Safari	Before 5.0.4
Apple Tvos	Before 4.1.0

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 12
Fedoraproject Fedora	Version 13

Configuration D

6 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.1
Opensuse Opensuse	Version 11.2
Suse Linux Enterprise Server	Version 10 sp3
Suse Linux Enterprise Server	Version 11
Suse Linux Enterprise Server	Version 11 sp1
Suse Linux Enterprise Server	Version 9

Configuration E

4 vulnerable

Vulnerable Software	Affected Versions
Vmware Player	From 2.5 to 2.5.5
Vmware Player	From 3.1 to 3.1.2
Vmware Workstation	From 6.5.0 to 6.5.5
Vmware Workstation	From 7.1 to 7.1.2

Configuration F

5 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 9.04
Canonical Ubuntu Linux	Version 9.10

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 5.0

Related CWEs

CWE-401

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (80)

http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=90cfcecc09febb8d6c8c1d37ea7bb7cf0f4b00f3#patch20

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044283.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044397.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.vmware.com/pipermail/security-announce/2010/000105.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/40302

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/40336

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/40472

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/40547

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/41574

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/42314

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/42317

Source: secalert@redhat.com

Broken Link

http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.613061

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://support.apple.com/kb/HT4435

Source: secalert@redhat.com

Broken Link

http://support.apple.com/kb/HT4456

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT4457

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT4554

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT4566

Source: secalert@redhat.com

Broken Link

http://www.debian.org/security/2010/dsa-2072

Source: secalert@redhat.com

Third Party Advisory

http://www.libpng.org/pub/png/libpng.html

Source: secalert@redhat.com

ProductVendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2010:133

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/bid/41174

Source: secalert@redhat.com

PatchThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1024723

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-960-1

Source: secalert@redhat.com

Third Party Advisory

http://www.vmware.com/security/advisories/VMSA-2010-0014.html

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2010/1612

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2010/1637

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2010/1755

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2010/1837

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2010/1846

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2010/1877

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2010/2491

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2010/3045

Source: secalert@redhat.com

Broken Link

http://www.vupen.com/english/advisories/2010/3046

Source: secalert@redhat.com

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=608644

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/59816

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=90cfcecc09febb8d6c8c1d37ea7bb7cf0f4b00f3#patch20