CVE-2014-9495
10.01.2015, 19:59
Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might allow context-dependent attackers to execute arbitrary code via a "very wide interlaced" PNG image.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apple | mac_os_x | 𝑥 ≤ 10.11.3 |
| libpng | libpng | 𝑥 ≤ 1.5.20 |
| libpng | libpng | 1.6.0 |
| libpng | libpng | 1.6.0:beta |
| libpng | libpng | 1.6.1 |
| libpng | libpng | 1.6.1:beta |
| libpng | libpng | 1.6.2 |
| libpng | libpng | 1.6.2:beta |
| libpng | libpng | 1.6.3 |
| libpng | libpng | 1.6.3:beta |
| libpng | libpng | 1.6.4 |
| libpng | libpng | 1.6.4:beta |
| libpng | libpng | 1.6.5 |
| libpng | libpng | 1.6.6 |
| libpng | libpng | 1.6.7 |
| libpng | libpng | 1.6.7:beta |
| libpng | libpng | 1.6.8 |
| libpng | libpng | 1.6.8:beta |
| libpng | libpng | 1.6.9 |
| libpng | libpng | 1.6.9:beta |
| libpng | libpng | 1.6.10 |
| libpng | libpng | 1.6.10:beta |
| libpng | libpng | 1.6.11 |
| libpng | libpng | 1.6.11:beta |
| libpng | libpng | 1.6.12:beta |
| libpng | libpng | 1.6.13 |
| libpng | libpng | 1.6.13:beta |
| libpng | libpng | 1.6.14 |
| libpng | libpng | 1.6.14:beta |
| libpng | libpng | 1.6.15 |
| libpng | libpng | 1.6.15:beta |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libpng1.6 |
| ||||||||||||||
| texlive-bin |
|
Ubuntu Releases
Common Weakness Enumeration
References