Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistCertccCVELIST:CVE-2010-0205
HistoryMar 03, 2010 - 7:00 p.m.

CVE-2010-0205

2010-03-0319:00:00
certcc
www.cve.org

8.9 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.7%

JSON

The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of service (memory and CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate compression method on data composed of many occurrences of the same character, related to a “decompression bomb” attack.

References

Related

nessus 26
openvas 37
altlinux 2
nvd 1
fedora 8
cve 1
freebsd 1
prion 1
cert 1
ubuntucve 1
veracode 1
securityvulns 2
debian 2
osv 1
ubuntu 1
gentoo 1
oraclelinux 1
centos 1
redhat 1
kaspersky 1
vmware 2
nessus
nessus
Fedora 13 : libpng10-1.0.53-1.fc13 (2010-2988)
2010-07-01 00:00:00
Fedora 12 : libpng10-1.0.53-1.fc12 (2010-3375)
2010-07-01 00:00:00
SuSE 11.1 Security Update : libpng12-0 (SAT Patch Number 2473)
2011-01-21 00:00:00
openvas
openvas
Fedora Update for libpng FEDORA-2010-4673
2010-03-31 00:00:00
FreeBSD Ports: png
2010-05-04 00:00:00
Mandriva Update for libpng MDVSA-2010:064 (libpng)
2010-03-31 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package libpng version 1.2.43-alt1
2010-03-09 00:00:00
Security fix for the ALT Linux 5 package libpng version 1.2.43-alt1
2010-03-09 00:00:00
nvd
nvd
CVE-2010-0205
2010-03-03 19:30:00
fedora
fedora
[SECURITY] Fedora 13 Update: libpng-1.2.43-1.fc13
2010-03-20 03:41:41
[SECURITY] Fedora 11 Update: libpng10-1.0.53-1.fc11
2010-03-16 00:50:55
[SECURITY] Fedora 12 Update: libpng-1.2.43-1.fc12
2010-03-25 22:41:05
cve
cve
CVE-2010-0205
2010-03-03 19:30:00
freebsd
freebsd
png -- libpng decompression denial of service
2010-02-27 00:00:00
prion
prion
Design/Logic Flaw
2010-03-03 19:30:00
cert
cert
libpng stalls on highly compressed ancillary chunks
2010-03-02 00:00:00
ubuntucve
ubuntucve
CVE-2010-0205
2010-03-03 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:43:55
securityvulns
securityvulns
libpng DoS
2010-03-18 00:00:00
About the security content of Mac OS X v10.6.5 and Security Update 2010-007
2010-11-18 00:00:00
debian
debian
[SECURITY] [DSA 2032-1] New libpng packages fix several vulnerabilities
2010-04-11 16:56:05
[SECURITY] [DSA 2032-1] New libpng packages fix several vulnerabilities
2010-04-11 16:56:05
osv
osv
libpng - several vulnerabilities
2010-04-11 00:00:00
ubuntu
ubuntu
libpng vulnerabilities
2010-03-16 00:00:00
gentoo
gentoo
Libpng: Multiple vulnerabilities
2010-10-05 00:00:00
oraclelinux
oraclelinux
libpng security update
2010-07-14 00:00:00
centos
centos
libpng, libpng10 security update
2010-07-14 22:40:18
redhat
redhat
(RHSA-2010:0534) Important: libpng security update
2010-07-14 00:00:00
kaspersky
kaspersky
KLA10386 Multiple vulnerabilities in VMware
2010-09-23 00:00:00
vmware
vmware
VMware Workstation, Player, and ACE address several security issues.
2010-09-23 00:00:00
VMware Workstation, Player, and ACE address several security issues.
2010-09-23 00:00:00

8.9 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.7%

JSON
Related for CVELIST:CVE-2010-0205
nessus26openvas37altlinux2nvd1fedora8cve1freebsd1prion1cert1ubuntucve1veracode1securityvulns2debian2osv1ubuntu1gentoo1oraclelinux1centos1redhat1kaspersky1vmware2