Lucene search

K
cve[email protected]CVE-2010-1519
HistoryAug 16, 2010 - 3:14 p.m.

CVE-2010-1519

2010-08-1615:14:11
CWE-189
web.nvd.nist.gov
22
cve-2010-1519
integer overflow
glpng
arbitrary code execution
png
heap-based buffer overflow
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.1%

Multiple integer overflows in glpng.c in glpng 1.45 allow context-dependent attackers to execute arbitrary code via a crafted PNG image, related to (1) the pngLoadRawF function and (2) the pngLoadF function, leading to heap-based buffer overflows.

Affected configurations

NVD
Node
glpngglpngMatch1.45
CPENameOperatorVersion
glpng:glpngglpngeq1.45

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.1%