Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-960-1
HistoryJul 08, 2010 - 12:00 a.m.

libpng vulnerabilities

2010-07-0800:00:00
ubuntu.com
50

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.691

Percentile

98.0%

JSON

Releases

  • Ubuntu 10.04
  • Ubuntu 9.10
  • Ubuntu 9.04
  • Ubuntu 8.04
  • Ubuntu 6.06

Packages

  • libpng -

Details

It was discovered that libpng did not properly handle certain malformed PNG
images. If a user or automated system were tricked into opening a crafted
PNG file, an attacker could cause a denial of service or possibly execute
arbitrary code with the privileges of the user invoking the program.
(CVE-2010-1205)

It was discovered that libpng did not properly handle certain malformed PNG
images. If a user or automated system were tricked into processing a
crafted PNG image, an attacker could possibly use this flaw to consume all
available resources, resulting in a denial of service. (CVE-2010-2249)

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchlibpng12-0< 1.2.37-1ubuntu0.2UNKNOWN
Ubuntu9.10noarchlibpng12-0-udeb< 1.2.37-1ubuntu0.2UNKNOWN
Ubuntu9.10noarchlibpng12-dev< 1.2.37-1ubuntu0.2UNKNOWN
Ubuntu9.04noarchlibpng12-0< 1.2.27-2ubuntu2.2UNKNOWN
Ubuntu9.04noarchlibpng12-0-udeb< 1.2.27-2ubuntu2.2UNKNOWN
Ubuntu9.04noarchlibpng12-dev< 1.2.27-2ubuntu2.2UNKNOWN
Ubuntu8.04noarchlibpng12-0< 1.2.15~beta5-3ubuntu0.3UNKNOWN
Ubuntu8.04noarchlibpng12-0-udeb< 1.2.15~beta5-3ubuntu0.3UNKNOWN
Ubuntu8.04noarchlibpng12-dev< 1.2.15~beta5-3ubuntu0.3UNKNOWN
Ubuntu6.06noarchlibpng12-0< 1.2.8rel-5ubuntu0.6UNKNOWN
Rows per page:
1-10 of 151

Related

altlinux 2
openvas 79
nessus 46
debian 5
securityvulns 3
fedora 21
osv 3
slackware 1
gentoo 1
centos 3
oraclelinux 3
redhat 3
prion 2
ubuntucve 2
nvd 2
cvelist 2
debiancve 2
veracode 2
cve 2
checkpoint_advisories 1
exploitpack 1
mozilla 1
exploitdb 1
seebug 1
freebsd 1
zdt 1
packetstorm 1
cert 1
kaspersky 1
vmware 2
ibm 1
ubuntu 2
altlinux
altlinux
Security fix for the ALT Linux 5 package libpng version 1.2.44-alt1
2010-06-29 00:00:00
Security fix for the ALT Linux 6 package libpng version 1.2.44-alt1
2010-06-29 00:00:00
openvas
openvas
Slackware: Security Advisory (SSA:2010-180-01)
2012-09-10 00:00:00
Ubuntu: Security Advisory (USN-960-1)
2010-07-12 00:00:00
Slackware Advisory SSA:2010-180-01 libpng
2012-09-11 00:00:00
nessus
nessus
Fedora 12 : mingw32-libpng-1.2.44-1.fc12 (2010-10776)
2010-07-27 00:00:00
SuSE 11 / 11.1 Security Update : libpng (SAT Patch Numbers 3045 / 3046)
2010-12-02 00:00:00
Debian DSA-2072-1 : libpng - several vulnerabilities
2010-07-21 00:00:00
debian
debian
[SECURITY] [DSA 2072-1] New libpng packages fix several vulnerabilities
2010-07-19 12:27:24
[SECURITY] [DSA 2072-1] New libpng packages fix several vulnerabilities
2010-07-19 12:27:24
[SECURITY] [DSA 2075-1] New xulrunner packages fix several vulnerabilities
2010-07-27 19:47:37
securityvulns
securityvulns
[USN-960-1] libpng vulnerabilities
2010-07-11 00:00:00
libpng multiple security vulnerabilities
2010-07-11 00:00:00
Mozilla Foundation Security Advisory 2010-41
2010-07-24 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: mingw32-libpng-1.2.44-1.fc12
2010-07-27 02:50:29
[SECURITY] Fedora 13 Update: mingw32-libpng-1.2.44-1.fc13
2010-07-27 02:50:02
[SECURITY] Fedora 13 Update: libpng-1.2.44-1.fc13
2010-07-01 18:36:39
osv
osv
libpng - several vulnerabilities
2010-07-19 00:00:00
xulrunner - several vulnerabilities
2010-07-27 00:00:00
libpng16-16-1.6.26-1.1 on GA media
2024-06-15 00:00:00
slackware
slackware
[slackware-security] libpng
2010-06-30 06:39:45
gentoo
gentoo
Libpng: Multiple vulnerabilities
2010-10-05 00:00:00
centos
centos
libpng, libpng10 security update
2010-07-14 22:40:18
seamonkey security update
2010-08-16 21:36:58
thunderbird security update
2010-07-22 14:50:56
oraclelinux
oraclelinux
libpng security update
2010-07-14 00:00:00
seamonkey security update
2010-07-21 00:00:00
firefox security update
2010-07-21 00:00:00
redhat
redhat
(RHSA-2010:0534) Important: libpng security update
2010-07-14 00:00:00
(RHSA-2010:0546) Critical: seamonkey security update
2010-07-20 00:00:00
(RHSA-2010:0545) Critical: thunderbird security update
2010-07-20 00:00:00
prion
prion
Memory corruption
2010-06-30 18:30:00
Buffer overflow
2010-06-30 18:30:00
ubuntucve
ubuntucve
CVE-2010-2249
2010-06-30 00:00:00
CVE-2010-1205
2010-06-30 00:00:00
nvd
nvd
CVE-2010-2249
2010-06-30 18:30:01
CVE-2010-1205
2010-06-30 18:30:01
cvelist
cvelist
CVE-2010-2249
2010-06-30 18:00:00
CVE-2010-1205
2010-06-30 18:00:00
debiancve
debiancve
CVE-2010-2249
2010-06-30 18:30:01
CVE-2010-1205
2010-06-30 18:30:01
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:43:56
Arbitrary Code Execution
2020-04-10 00:43:55
cve
cve
CVE-2010-2249
2010-06-30 18:30:01
CVE-2010-1205
2010-06-30 18:30:01
checkpoint_advisories
checkpoint_advisories
Incorrect libpng Usage Heap Overflow- Ver2 (CVE-2010-1205)
2015-05-18 00:00:00
exploitpack
exploitpack
libpng 1.4.2 - Denial of Service
2010-07-20 00:00:00
mozilla
mozilla
Remote code execution using malformed PNG image — Mozilla
2010-07-20 00:00:00
exploitdb
exploitdb
libpng 1.4.2 - Denial of Service
2010-07-20 00:00:00
seebug
seebug
libpng <= 1.4.2 - Denial of Service Vulnerability
2014-07-01 00:00:00
freebsd
freebsd
png -- libpng decompression buffer overflow
2010-03-30 00:00:00
zdt
zdt
libpng <= 1.4.2 Denial of Service Vulnerability
2010-07-20 00:00:00
packetstorm
packetstorm
libpng 1.4.2 Denial Of Service
2010-07-21 00:00:00
cert
cert
libpng fails to limit number of rows in header
2010-07-02 00:00:00
kaspersky
kaspersky
KLA10386 Multiple vulnerabilities in VMware
2010-09-23 00:00:00
vmware
vmware
VMware Workstation, Player, and ACE address several security issues.
2010-09-23 00:00:00
VMware Workstation, Player, and ACE address several security issues.
2010-09-23 00:00:00
ibm
ibm
Security Bulletin: Security vulnerability has been identified in BigFix Platform shipped with IBM License Metric Tool.
2020-08-12 08:19:22
ubuntu
ubuntu
Thunderbird vulnerabilities
2010-07-26 00:00:00
Firefox and Xulrunner vulnerabilities
2010-07-23 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.691

Percentile

98.0%

JSON
Related for USN-960-1
altlinux2openvas79nessus46debian5securityvulns3fedora21osv3slackware1gentoo1centos3oraclelinux3redhat3prion2ubuntucve2nvd2cvelist2debiancve2veracode2cve2checkpoint_advisories1exploitpack1mozilla1exploitdb1seebug1freebsd1zdt1packetstorm1cert1kaspersky1vmware2ibm1ubuntu2