Lucene search

[email protected]NVD:CVE-2009-2042

HistoryJun 12, 2009 - 8:30 p.m.

CVE-2009-2042

2009-06-1220:30:00

CWE-200

[email protected]

web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

9.2 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

81.0%

JSON

libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote attackers to read portions of sensitive memory via “out-of-bounds pixels” in the file.

Affected configurations

NVD

Node

libpnglibpngRange≤1.2.35

libpnglibpngMatch0.89c

libpnglibpngMatch0.95

libpnglibpngMatch1.0.0

libpnglibpngMatch1.0.1

libpnglibpngMatch1.0.2

libpnglibpngMatch1.0.7beta17

libpnglibpngMatch1.0.7beta18

libpnglibpngMatch1.0.7rc1

libpnglibpngMatch1.0.7rc2

libpnglibpngMatch1.0.8

libpnglibpngMatch1.0.8beta1

libpnglibpngMatch1.0.8beta2

libpnglibpngMatch1.0.8beta3

libpnglibpngMatch1.0.8beta4

libpnglibpngMatch1.0.8rc1

libpnglibpngMatch1.0.9

libpnglibpngMatch1.0.9beta1

libpnglibpngMatch1.0.9beta10

libpnglibpngMatch1.0.9beta2

libpnglibpngMatch1.0.9beta3

libpnglibpngMatch1.0.9beta4

libpnglibpngMatch1.0.9beta5

libpnglibpngMatch1.0.9beta6

libpnglibpngMatch1.0.9beta7

libpnglibpngMatch1.0.9beta8

libpnglibpngMatch1.0.9beta9

libpnglibpngMatch1.0.9rc1

libpnglibpngMatch1.0.9rc2

libpnglibpngMatch1.0.10

libpnglibpngMatch1.0.10beta1

libpnglibpngMatch1.0.10rc1

libpnglibpngMatch1.0.11

libpnglibpngMatch1.0.11beta1

libpnglibpngMatch1.0.11beta2

libpnglibpngMatch1.0.11beta3

libpnglibpngMatch1.0.11rc1

libpnglibpngMatch1.0.12

libpnglibpngMatch1.0.12beta1

libpnglibpngMatch1.0.12rc1

libpnglibpngMatch1.0.13

libpnglibpngMatch1.0.14

libpnglibpngMatch1.0.15

libpnglibpngMatch1.0.15rc1

libpnglibpngMatch1.0.15rc2

libpnglibpngMatch1.0.15rc3

libpnglibpngMatch1.0.16

libpnglibpngMatch1.0.17

libpnglibpngMatch1.0.17rc1

libpnglibpngMatch1.0.18

libpnglibpngMatch1.0.19

libpnglibpngMatch1.0.19rc1

libpnglibpngMatch1.0.19rc2

libpnglibpngMatch1.0.19rc3

libpnglibpngMatch1.0.19rc5

libpnglibpngMatch1.0.20

libpnglibpngMatch1.0.21

libpnglibpngMatch1.0.21rc1

libpnglibpngMatch1.0.21rc2

libpnglibpngMatch1.0.22

libpnglibpngMatch1.0.22rc1

libpnglibpngMatch1.0.23

libpnglibpngMatch1.0.23rc1

libpnglibpngMatch1.2.0

libpnglibpngMatch1.2.0beta1

libpnglibpngMatch1.2.0beta2

libpnglibpngMatch1.2.0beta3

libpnglibpngMatch1.2.0beta4

libpnglibpngMatch1.2.0beta5

libpnglibpngMatch1.2.0rc1

libpnglibpngMatch1.2.1

libpnglibpngMatch1.2.1beta1

libpnglibpngMatch1.2.1beta2

libpnglibpngMatch1.2.1beta3

libpnglibpngMatch1.2.1beta4

libpnglibpngMatch1.2.1rc1

libpnglibpngMatch1.2.1rc2

libpnglibpngMatch1.2.2

libpnglibpngMatch1.2.2beta1

libpnglibpngMatch1.2.2beta2

libpnglibpngMatch1.2.2beta3

libpnglibpngMatch1.2.2beta4

libpnglibpngMatch1.2.2beta5

libpnglibpngMatch1.2.2beta6

libpnglibpngMatch1.2.2rc1

libpnglibpngMatch1.2.3

libpnglibpngMatch1.2.3rc3

libpnglibpngMatch1.2.3rc6

libpnglibpngMatch1.2.10

libpnglibpngMatch1.2.10beta1

libpnglibpngMatch1.2.10beta2

libpnglibpngMatch1.2.10beta3

libpnglibpngMatch1.2.10beta4

libpnglibpngMatch1.2.10beta5

libpnglibpngMatch1.2.10beta6

libpnglibpngMatch1.2.10beta7

libpnglibpngMatch1.2.10rc1

libpnglibpngMatch1.2.10rc2

libpnglibpngMatch1.2.10rc3

libpnglibpngMatch1.2.11

libpnglibpngMatch1.2.11beta1

libpnglibpngMatch1.2.11beta2

libpnglibpngMatch1.2.11beta3

libpnglibpngMatch1.2.11beta4

libpnglibpngMatch1.2.11rc1

libpnglibpngMatch1.2.11rc2

libpnglibpngMatch1.2.11rc3

libpnglibpngMatch1.2.11rc5

libpnglibpngMatch1.2.13

libpnglibpngMatch1.2.13beta1

libpnglibpngMatch1.2.13rc1

libpnglibpngMatch1.2.13rc2

libpnglibpngMatch1.2.14

libpnglibpngMatch1.2.14beta1

libpnglibpngMatch1.2.14beta2

libpnglibpngMatch1.2.14rc1

libpnglibpngMatch1.2.15

libpnglibpngMatch1.2.15beta1

libpnglibpngMatch1.2.15beta2

libpnglibpngMatch1.2.15beta3

libpnglibpngMatch1.2.15beta4

libpnglibpngMatch1.2.15beta5

libpnglibpngMatch1.2.15beta6

libpnglibpngMatch1.2.15rc1

libpnglibpngMatch1.2.15rc2

libpnglibpngMatch1.2.15rc3

libpnglibpngMatch1.2.15rc4

libpnglibpngMatch1.2.15rc5

libpnglibpngMatch1.2.16

libpnglibpngMatch1.2.16beta1

libpnglibpngMatch1.2.16beta2

libpnglibpngMatch1.2.16rc1

libpnglibpngMatch1.2.17

libpnglibpngMatch1.2.17beta1

libpnglibpngMatch1.2.17beta2

libpnglibpngMatch1.2.17rc1

libpnglibpngMatch1.2.17rc2

libpnglibpngMatch1.2.17rc3

libpnglibpngMatch1.2.17rc4

libpnglibpngMatch1.2.18

libpnglibpngMatch1.2.19

libpnglibpngMatch1.2.19beta1

libpnglibpngMatch1.2.19beta10

libpnglibpngMatch1.2.19beta11

libpnglibpngMatch1.2.19beta12

libpnglibpngMatch1.2.19beta13

libpnglibpngMatch1.2.19beta14

libpnglibpngMatch1.2.19beta15

libpnglibpngMatch1.2.19beta16

libpnglibpngMatch1.2.19beta17

libpnglibpngMatch1.2.19beta18

libpnglibpngMatch1.2.19beta19

libpnglibpngMatch1.2.19beta2

libpnglibpngMatch1.2.19beta20

libpnglibpngMatch1.2.19beta21

libpnglibpngMatch1.2.19beta22

libpnglibpngMatch1.2.19beta23

libpnglibpngMatch1.2.19beta24

libpnglibpngMatch1.2.19beta25

libpnglibpngMatch1.2.19beta26

libpnglibpngMatch1.2.19beta27

libpnglibpngMatch1.2.19beta28

libpnglibpngMatch1.2.19beta29

libpnglibpngMatch1.2.19beta3

libpnglibpngMatch1.2.19beta30

libpnglibpngMatch1.2.19beta31

libpnglibpngMatch1.2.19beta32

libpnglibpngMatch1.2.19beta33

libpnglibpngMatch1.2.19beta4

libpnglibpngMatch1.2.19beta5

libpnglibpngMatch1.2.19beta6

libpnglibpngMatch1.2.19beta7

libpnglibpngMatch1.2.19beta8

libpnglibpngMatch1.2.19beta9

libpnglibpngMatch1.2.19rc1

libpnglibpngMatch1.2.19rc2

libpnglibpngMatch1.2.19rc3

libpnglibpngMatch1.2.19rc4

libpnglibpngMatch1.2.19rc5

libpnglibpngMatch1.2.19rc6

libpnglibpngMatch1.2.20

libpnglibpngMatch1.2.20beta01

libpnglibpngMatch1.2.20beta02

libpnglibpngMatch1.2.20beta03

libpnglibpngMatch1.2.20beta04

libpnglibpngMatch1.2.20rc1

libpnglibpngMatch1.2.20rc2

libpnglibpngMatch1.2.20rc3

libpnglibpngMatch1.2.20rc4

libpnglibpngMatch1.2.20rc5

libpnglibpngMatch1.2.20rc6

libpnglibpngMatch1.2.21

libpnglibpngMatch1.2.21beta1

libpnglibpngMatch1.2.21beta2

libpnglibpngMatch1.2.21rc1

libpnglibpngMatch1.2.21rc2

libpnglibpngMatch1.2.21rc3

libpnglibpngMatch1.2.22

libpnglibpngMatch1.2.22beta1

libpnglibpngMatch1.2.22beta2

libpnglibpngMatch1.2.22beta2-1.2.21

libpnglibpngMatch1.2.22beta3

libpnglibpngMatch1.2.22beta3-1.2.21

libpnglibpngMatch1.2.22beta4

libpnglibpngMatch1.2.22beta4-1.2.21

libpnglibpngMatch1.2.22rc1

libpnglibpngMatch1.2.22rc1-1.2.21

libpnglibpngMatch1.2.23

libpnglibpngMatch1.2.23beta01

libpnglibpngMatch1.2.23beta01-1.2.22

libpnglibpngMatch1.2.23beta02

libpnglibpngMatch1.2.23beta02-1.2.22

libpnglibpngMatch1.2.23beta03

libpnglibpngMatch1.2.23beta03-1.2.22

libpnglibpngMatch1.2.23beta04

libpnglibpngMatch1.2.23beta04-1.2.22

libpnglibpngMatch1.2.23beta05

libpnglibpngMatch1.2.23beta05-1.2.22

libpnglibpngMatch1.2.23rc01

libpnglibpngMatch1.2.23rc01-1.2.22

libpnglibpngMatch1.2.24

libpnglibpngMatch1.2.24beta01

libpnglibpngMatch1.2.24beta01-1.2.23

libpnglibpngMatch1.2.24beta02

libpnglibpngMatch1.2.24beta02-1.2.23

libpnglibpngMatch1.2.24beta03

libpnglibpngMatch1.2.24beta03-1.2.23

libpnglibpngMatch1.2.24rc01

libpnglibpngMatch1.2.24rc01-1.2.23

libpnglibpngMatch1.2.25

libpnglibpngMatch1.2.25beta01

libpnglibpngMatch1.2.25beta02

libpnglibpngMatch1.2.25beta03

libpnglibpngMatch1.2.25beta04

libpnglibpngMatch1.2.25beta05

libpnglibpngMatch1.2.25beta06

libpnglibpngMatch1.2.25rc01

libpnglibpngMatch1.2.25rc02

libpnglibpngMatch1.2.26

libpnglibpngMatch1.2.26beta01

libpnglibpngMatch1.2.26beta02

libpnglibpngMatch1.2.26beta03

libpnglibpngMatch1.2.26beta04

libpnglibpngMatch1.2.26beta05

libpnglibpngMatch1.2.26rc01

libpnglibpngMatch1.2.30

libpnglibpngMatch1.2.31

libpnglibpngMatch1.2.33

libpnglibpngMatch1.2.34

References

archives.neohapsis.com/archives/bugtraq/2010-04/0077.html

archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html

lists.apple.com/archives/security-announce/2010//Mar/msg00001.html

lists.vmware.com/pipermail/security-announce/2010/000090.html

secunia.com/advisories/35346

secunia.com/advisories/35470

secunia.com/advisories/35524

secunia.com/advisories/35594

secunia.com/advisories/39206

secunia.com/advisories/39215

secunia.com/advisories/39251

security.gentoo.org/glsa/glsa-200906-01.xml

slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.551809

support.apple.com/kb/HT4077

ubuntu.com/usn/usn-913-1

www.debian.org/security/2010/dsa-2032

www.libpng.org/pub/png/libpng.html

www.mandriva.com/security/advisories?name=MDVSA-2010:063

www.securityfocus.com/bid/35233

www.vmware.com/security/advisories/VMSA-2010-0007.html

www.vupen.com/english/advisories/2009/1510

www.vupen.com/english/advisories/2010/0637

www.vupen.com/english/advisories/2010/0682

www.vupen.com/english/advisories/2010/0847

exchange.xforce.ibmcloud.com/vulnerabilities/50966

www.redhat.com/archives/fedora-package-announce/2009-June/msg00218.html

www.redhat.com/archives/fedora-package-announce/2009-June/msg00630.html

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

9.2 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

81.0%

JSON

Related for NVD:CVE-2009-2042

cve1 nessus25 openvas44 cvelist1 prion1 slackware1 fedora4 veracode1 securityvulns4 gentoo2 ubuntucve1 debian2 ubuntu1 osv1 redhat1 oraclelinux1 centos1 vmware2 suse1 threatpost1