UbuntuUSN-1402-1libpng vulnerability
9 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.142 Low
EPSS
Percentile
95.6%
Releases
- Ubuntu 11.10
- Ubuntu 11.04
- Ubuntu 10.10
- Ubuntu 10.04
- Ubuntu 8.04
Packages
- libpng - PNG (Portable Network Graphics) file library
Details
It was discovered that libpng did not properly process compressed chunks.
If a user or automated system using libpng were tricked into opening a
specially crafted image, an attacker could exploit this to cause a denial
of service or execute code with the privileges of the user invoking the
program.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 8.04 | noarch | libpng12-0 | < 1.2.15~beta5-3ubuntu0.6 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libpng12-0-udeb | < 1.2.15~beta5-3ubuntu0.6 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libpng12-dev | < 1.2.15~beta5-3ubuntu0.6 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libpng12-0 | < 1.2.46-3ubuntu1.2 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libpng12-0-udeb | < 1.2.46-3ubuntu1.2 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libpng12-dev | < 1.2.46-3ubuntu1.2 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libpng3 | < 1.2.46-3ubuntu1.2 | UNKNOWN |
| Ubuntu | 11.04 | noarch | libpng12-0 | < 1.2.44-1ubuntu3.3 | UNKNOWN |
| Ubuntu | 11.04 | noarch | libpng12-0-udeb | < 1.2.44-1ubuntu3.3 | UNKNOWN |
| Ubuntu | 11.04 | noarch | libpng12-dev | < 1.2.44-1ubuntu3.3 | UNKNOWN |
References
Related
9 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.142 Low
EPSS
Percentile
95.6%