← Back

CVE-2012-3425

nvd nist
Published: Aug 13, 2012Modified: Apr 29, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:N/A:P
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

The png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48, 1.4.x before 1.4.10, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large avail_in field value in a PNG image.

Affected (149)

Products: Canonical: Ubuntu Linux · Libpng: Libpng · Opensuse: Opensuse · +2 more
Show all products
1 product
Ubuntu Linux
1 product
Libpng
1 product
Opensuse
1 product
Libpng
1 product
Debian Linux
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Version 12.04
Version 14.04
Version 15.04
Version 15.10
Configuration B
10 vulnerable
Vulnerable SoftwareAffected Versions
Libpng
Version 1.4.0
Version 1.4.1
Version 1.4.2
Version 1.4.3
Version 1.4.4
Version 1.4.5
Version 1.4.6
Version 1.4.7
Version 1.4.8
Version 1.4.9
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Opensuse
Version 11.4
Version 12.1
Configuration D
55 vulnerable
Vulnerable SoftwareAffected Versions
Libpng
Version 1.2.0
Version 1.2.10
Version 1.2.11
Version 1.2.12
Version 1.2.13
Version 1.2.14
Version 1.2.15
Version 1.2.16
Version 1.2.17
Version 1.2.18
Version 1.2.19
Version 1.2.1
Version 1.2.20
Version 1.2.21
Version 1.2.22
Version 1.2.23
Version 1.2.24
Version 1.2.25
Version 1.2.26
Version 1.2.27
Version 1.2.28
Version 1.2.29
Version 1.2.2
Version 1.2.30
Version 1.2.31
Version 1.2.32
Version 1.2.33
Version 1.2.34
Version 1.2.35
Version 1.2.36
Version 1.2.37
Version 1.2.38
Version 1.2.39
Version 1.2.3
Version 1.2.40
Version 1.2.41
Version 1.2.42
Version 1.2.43
Version 1.2.43 devel
Version 1.2.44
Version 1.2.45
Version 1.2.45 devel
Version 1.2.46
Version 1.2.46 devel
Version 1.2.47
Version 1.2.47 beta
Version 1.2.48 betas
Version 1.2.4
Version 1.2.5
Version 1.2.6
Version 1.2.7
Version 1.2.8
Version 1.2.9
Redhat
Version 1.2.2-16
Version 1.2.2-20
Configuration E
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 6.0
Configuration F
19 vulnerable
Vulnerable SoftwareAffected Versions
Libpng
Version 1.5.0 beta
Version 1.5.10 beta
Version 1.5.1
Version 1.5.1 beta
Version 1.5.2
Version 1.5.2 beta
Version 1.5.3 beta
Version 1.5.4
Version 1.5.4 beta
Version 1.5.5
Version 1.5.5 beta
Version 1.5.6
Version 1.5.6 beta
Version 1.5.7
Version 1.5.7 beta
Version 1.5.8
Version 1.5.8 beta
Version 1.5.9
Version 1.5.9 beta
Configuration G
58 vulnerable
Vulnerable SoftwareAffected Versions
Libpng
Version 1.0.0
Version 1.0.10
Version 1.0.11
Version 1.0.12
Version 1.0.13
Version 1.0.14
Version 1.0.15
Version 1.0.16
Version 1.0.17
Version 1.0.18
Version 1.0.19
Version 1.0.1
Version 1.0.20
Version 1.0.21
Version 1.0.22
Version 1.0.23
Version 1.0.24
Version 1.0.25
Version 1.0.26
Version 1.0.27
Version 1.0.28
Version 1.0.29
Version 1.0.2
Version 1.0.30
Version 1.0.31
Version 1.0.32
Version 1.0.33
Version 1.0.34
Version 1.0.35
Version 1.0.37
Version 1.0.38
Version 1.0.39
Version 1.0.3
Version 1.0.40
Version 1.0.41
Version 1.0.42
Version 1.0.43
Version 1.0.44
Version 1.0.45
Version 1.0.46
Version 1.0.47
Version 1.0.48
Version 1.0.50
Version 1.0.51
Version 1.0.52
Version 1.0.53
Version 1.0.54
Version 1.0.55
Version 1.0.55 rc01
Version 1.0.56
Version 1.0.56 devel
Version 1.0.57
Version 1.0.57 rc01
Version 1.0.5
Version 1.0.6
Version 1.0.7
Version 1.0.8
Version 1.0.9

References (18)

Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.