CVE-2010-1519

EUVD-2010-1546
Multiple integer overflows in glpng.c in glpng 1.45 allow context-dependent attackers to execute arbitrary code via a crafted PNG image, related to (1) the pngLoadRawF function and (2) the pngLoadF function, leading to heap-based buffer overflows.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
Affected Products (NVD)
VendorProductVersion
glpngglpng
1.45
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libglpng
dapper
ignored
hardy
ignored
jaunty
ignored
karmic
ignored
lucid
ignored
maverick
ignored
natty
ignored
oneiric
dne
precise
dne
quantal
dne
raring
dne
saucy
dne
Common Weakness Enumeration
References
http://secunia.com/advisories/40354
http://secunia.com/secunia_research/2010-87/
http://www.mandriva.com/security/advisories?name=MDVSA-2010:179
http://www.securityfocus.com/archive/1/513022/100/0/threaded
http://secunia.com/advisories/40354
http://secunia.com/secunia_research/2010-87/
http://www.mandriva.com/security/advisories?name=MDVSA-2010:179
http://www.securityfocus.com/archive/1/513022/100/0/threaded