libpng 'png_combine_row()' buffer overflow vulnerability

🗓️ 31 Dec 2014 00:00:00Reported by China National Vulnerability DatabaseType

Libpng png_combine_row buffer overflow from input validation flaw enabling arbitrary code execution.

Reporter	Title	Published	Views	Family All 57
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Rational DOORS (CVE-2014-3613, CVE-2014-3620, CVE-2014-8730, CVE-2014-9495, CVE-2015-0973)	1 May 202008:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Business Intelligence Server is affected by multiple vulnerabilities	15 Jun 201823:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerability in Product IBM Tivoli Common Reporting( CVE-2015-0138, CVE-2014-9495,CVE-2014-8917,CVE-2015-0973 ,CVE-2014-3566 ,CVE-2014-6457 ,CVE-2014-6593,CVE-2015-0410,CVE-2014-3569,CVE-2015-0204,CVE-2014-3570)	17 Jun 201815:02	–	ibm
IBM Security Bulletins	Security Bulletins - Cognos Analytics and Cognos Business Intelligence	19 Jul 201816:57	–	ibm
Tenable Nessus	Mac OS X 10.11.x < 10.11.4 Multiple Vulnerabilities	27 May 201600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : libpng (EulerOS-SA-2020-1661)	17 Jun 202000:00	–	nessus
Tenable Nessus	Fedora 22 : libpng10-1.0.63-1.fc22 (2015-2765)	10 Mar 201500:00	–	nessus
Tenable Nessus	Fedora 20 : libpng10-1.0.63-1.fc20 (2015-2830)	10 Mar 201500:00	–	nessus
Tenable Nessus	Fedora 21 : libpng10-1.0.63-1.fc21 (2015-2863)	10 Mar 201500:00	–	nessus
Tenable Nessus	GLSA-201502-10 : libpng: User-assisted execution of arbitrary code	16 Feb 201500:00	–	nessus

Vulners

Node

libpng libpngRange≤1.6.15

Source	Link
securityfocus	www.securityfocus.com/bid/71820

04 Jan 2015 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 210

CVSS 3.18.8

EPSS0.03889

SSVC