CVE-2016-10087

🗓️ 02 Jan 2017 16:17:29Reported by redhat.comType

The png_set_text_2 function in libpng versions 0.71 to 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference

Reporter	Title	Published	Views	Family All 112
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: Gdal vulnerabilities affect IBM Netezza Analytics for NPS	3 Jun 202214:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Common Reporting (TCR) 2017Q3 Security Updater: TCR, a part of IBM Jazz for Service Management (JazzSM) is affected by multiple vulnerabilities	17 Jun 201815:47	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in the libpng library affects IBM Cognos Metrics Manager	15 Jun 201823:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Business Intelligence Server 2017Q3 Security Updater : IBM Cognos Business Intelligence Server is affected by multiple vulnerabilities.	15 Jun 201823:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities	15 Jun 201823:49	–	ibm
ArchLinux	[ASA-201701-2] libpng: denial of service	1 Jan 201700:00	–	archlinux
ArchLinux	[ASA-201701-4] libpng12: denial of service	2 Jan 201700:00	–	archlinux
ArchLinux	[ASA-201701-5] lib32-libpng: denial of service	2 Jan 201700:00	–	archlinux
ArchLinux	[ASA-201701-6] lib32-libpng12: denial of service	2 Jan 201700:00	–	archlinux

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

09 Apr 2020 00:20Current

5.2Medium risk

Vulners AI Score5.2

CVSS 25

CVSS 33.3 - 7.5

EPSS0.05517