CVE-2010-1205
30.06.2010, 18:30
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
| Vendor | Product | Version |
|---|---|---|
| libpng | libpng | 𝑥 < 1.2.44 |
| libpng | libpng | 1.4.0 ≤ 𝑥 < 1.4.3 |
| chrome | 𝑥 < 5.0.375.99 | |
| apple | itunes | 𝑥 < 10.2 |
| apple | safari | 𝑥 < 5.0.4 |
| apple | iphone_os | 2.0 ≤ 𝑥 ≤ 4.1 |
| apple | mac_os_x | 10.6.0 ≤ 𝑥 < 10.6.4 |
| apple | mac_os_x_server | 10.6.0 ≤ 𝑥 < 10.6.4 |
| opensuse | opensuse | 11.1 |
| opensuse | opensuse | 11.2 |
| vmware | player | 2.5 ≤ 𝑥 < 2.5.5 |
| vmware | player | 3.1 ≤ 𝑥 < 3.1.2 |
| vmware | workstation | 6.5.0 ≤ 𝑥 < 6.5.5 |
| vmware | workstation | 7.1 ≤ 𝑥 < 7.1.2 |
| canonical | ubuntu_linux | 6.06 |
| canonical | ubuntu_linux | 8.04 |
| canonical | ubuntu_linux | 9.04 |
| canonical | ubuntu_linux | 9.10 |
| canonical | ubuntu_linux | 10.04 |
| debian | debian_linux | 5.0 |
| mozilla | firefox | 𝑥 < 3.5.11 |
| mozilla | firefox | 3.5.12 ≤ 𝑥 < 3.6.7 |
| mozilla | seamonkey | 𝑥 < 2.0.6 |
| mozilla | thunderbird | 𝑥 < 3.0.6 |
| mozilla | thunderbird | 3.0.7 ≤ 𝑥 < 3.1.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| chromium-browser |
| ||||||||||||
| firefox |
| ||||||||||||
| libpng |
| ||||||||||||
| thunderbird |
| ||||||||||||
| xulrunner-1.9.2 |
|
References