CVE-2010-2249
30.06.2010, 18:30
Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks.Enginsight
| Vendor | Product | Version |
|---|---|---|
| libpng | libpng | 𝑥 < 1.2.44 |
| libpng | libpng | 1.4.0 ≤ 𝑥 < 1.4.3 |
| apple | itunes | 𝑥 < 10.2 |
| apple | safari | 𝑥 < 5.0.4 |
| apple | iphone_os | 2.0 ≤ 𝑥 ≤ 4.1 |
| apple | tvos | 𝑥 < 4.1.0 |
| opensuse | opensuse | 11.1 |
| opensuse | opensuse | 11.2 |
| vmware | player | 2.5 ≤ 𝑥 < 2.5.5 |
| vmware | player | 3.1 ≤ 𝑥 < 3.1.2 |
| vmware | workstation | 6.5.0 ≤ 𝑥 < 6.5.5 |
| vmware | workstation | 7.1 ≤ 𝑥 < 7.1.2 |
| canonical | ubuntu_linux | 6.06 |
| canonical | ubuntu_linux | 8.04 |
| canonical | ubuntu_linux | 9.04 |
| canonical | ubuntu_linux | 9.10 |
| canonical | ubuntu_linux | 10.04 |
| debian | debian_linux | 5.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| chromium-browser |
| ||||||||||||
| firefox |
| ||||||||||||
| libpng |
|
Common Weakness Enumeration
References