Lucene search
Mozilla FoundationMFSA2009-10HistoryMar 04, 2009 - 12:00 a.m.
Upgrade PNG library to fix memory safety hazards — Mozilla
2009-03-0400:00:00
Mozilla Foundation
www.mozilla.org
26
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.075
Percentile
94.1%
Google security researcher Tavis Ormandy reported several memory safety hazards to the libpng project, an external library used by Mozilla to render PNG images. These vulnerabilities could be used by a malicious website to crash a victim’s browser and potentially execute arbitrary code on their computer. libpng was upgraded to version 1.2.35 which containis fixes for these flaws.
Affected configurations
Node
mozillafirefoxRange<3.0.7
ORmozillaseamonkeyRange<1.1.15
ORmozillathunderbirdRange<2.0.0.21
Related
nessus
nessus
SuSE9 Security Update : libpng (YOU Patch Number 12353)
2009-09-24 00:00:00
FreeBSD : pngcrush -- libpng Uninitialised Pointer Arrays Vulnerability (ea2411a4-08e8-11de-b88a-0022157515b2)
2009-03-05 00:00:00
SuSE 10 Security Update : libpng (ZYPP Patch Number 6024)
2009-09-24 00:00:00
openvas
openvas
Fedora Core 10 FEDORA-2009-2112 (libpng)
2009-03-02 00:00:00
Fedora Core 10 FEDORA-2009-2131 (mingw32-libpng)
2009-03-02 00:00:00
SLES11: Security update for libpng
2009-10-11 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: libpng-1.2.35-1.fc10
2009-02-26 15:33:35
[SECURITY] Fedora 10 Update: mingw32-libpng-1.2.35-1.fc10
2009-02-26 15:35:43
[SECURITY] Fedora 10 Update: libpng10-1.0.43-1.fc10
2009-03-09 23:12:14
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:30:13
f5
f5
K9988 : libpng vulnerability CVE-2009-0040
2013-03-27 00:00:00
SOL9988 - libpng vulnerability CVE-2009-0040
2009-04-21 00:00:00
cert
cert
libpng fails to properly initialize element pointers
2009-03-02 00:00:00
nvd
nvd
CVE-2009-0040
2009-02-22 22:30:00
prion
prion
Design/Logic Flaw
2009-02-22 22:30:00
seebug
seebug
VMware Server libpng Uninitialised Pointer Arrays Vulnerability
2009-08-24 00:00:00
securityvulns
securityvulns
libpng uninitialized pointers
2009-03-06 00:00:00
Mozilla Foundation Security Advisory 2009-10
2009-03-06 00:00:00
libpng multiple security vulnerabilities
2009-02-25 00:00:00
cve
cve
CVE-2009-0040
2009-02-22 22:30:00
ubuntucve
ubuntucve
CVE-2009-0040
2009-02-22 00:00:00
redhat
redhat
(RHSA-2009:0340) Moderate: libpng security update
2009-03-04 00:00:00
(RHSA-2009:0333) Moderate: libpng security update
2009-03-04 00:00:00
(RHSA-2009:0325) Critical: seamonkey security update
2009-03-04 00:00:00
freebsd
freebsd
pngcrush -- libpng Uninitialised Pointer Arrays Vulnerability
2009-02-19 00:00:00
slackware
slackware
libpng
2009-02-20 17:06:41
centos
centos
libpng, libpng10 security update
2009-03-04 23:31:04
libpng, libpng10 security update
2009-03-05 18:16:07
libpng security update
2009-03-11 03:53:56
cvelist
cvelist
CVE-2009-0040
2009-02-22 22:00:00
oraclelinux
oraclelinux
libpng security update
2009-03-04 00:00:00
libpng security update
2009-03-04 00:00:00
seamonkey security update
2009-03-05 00:00:00
vmware
vmware
VMware Hosted products and ESX and ESXi patches resolve security issues
2009-05-28 00:00:00
VMware Hosted products update libpng and Apache HTTP Server
2009-08-20 00:00:00
gentoo
gentoo
libpng: Multiple vulnerabilities
2009-03-15 00:00:00
osv
osv
libpng - several vulnerabilities
2009-03-22 00:00:00
debian
debian
[SECURITY] [DSA 1750-1] New libpng packages fix several vulnerabilities
2009-03-22 17:16:04
ubuntu
ubuntu
libpng vulnerabilities
2009-03-06 00:00:00
Firefox and Xulrunner vulnerabilities
2009-03-05 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-04-20 12:01:40
remote code execution in MozillaFirefox
2009-03-16 14:15:07
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.075
Percentile
94.1%
Related for MFSA2009-10