libpng vulnerabilities

2010-03-1600:00:00

ubuntu.com

9.7 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.013 Low

EPSS

Percentile

85.5%

JSON

Releases

Ubuntu 9.10
Ubuntu 9.04
Ubuntu 8.10
Ubuntu 8.04
Ubuntu 6.06

Packages

libpng -

Details

It was discovered that libpng did not properly initialize memory when
decoding certain 1-bit interlaced images. If a user or automated system
were tricked into processing crafted PNG images, an attacker could possibly
use this flaw to read sensitive information stored in memory. This issue
only affected Ubuntu 6.06 LTS, 8.04 LTS, 8.10 and 9.04. (CVE-2009-2042)

It was discovered that libpng did not properly handle certain excessively
compressed PNG images. If a user or automated system were tricked into
processing a crafted PNG image, an attacker could possibly use this flaw to
consume all available resources, resulting in a denial of service.
(CVE-2010-0205)

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchlibpng12-0< 1.2.37-1ubuntu0.1UNKNOWN
Ubuntu9.10noarchlibpng12-0-udeb< 1.2.37-1ubuntu0.1UNKNOWN
Ubuntu9.10noarchlibpng12-dev< 1.2.37-1ubuntu0.1UNKNOWN
Ubuntu9.04noarchlibpng12-0< 1.2.27-2ubuntu2.1UNKNOWN
Ubuntu9.04noarchlibpng12-0< udeb-1.2.27-2ubuntu2.1UNKNOWN
Ubuntu9.04noarchlibpng12-dev< 1.2.27-2ubuntu2.1UNKNOWN
Ubuntu8.10noarchlibpng12-0< 1.2.27-1ubuntu0.2UNKNOWN
Ubuntu8.10noarchlibpng12-0-udeb< 1.2.27-1ubuntu0.2UNKNOWN
Ubuntu8.10noarchlibpng12-dev< 1.2.27-1ubuntu0.2UNKNOWN
Ubuntu8.04noarchlibpng12-0< 1.2.15~beta5-3ubuntu0.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	9.10	noarch	libpng12-0	< 1.2.37-1ubuntu0.1	UNKNOWN
Ubuntu	9.10	noarch	libpng12-0-udeb	< 1.2.37-1ubuntu0.1	UNKNOWN
Ubuntu	9.10	noarch	libpng12-dev	< 1.2.37-1ubuntu0.1	UNKNOWN
Ubuntu	9.04	noarch	libpng12-0	< 1.2.27-2ubuntu2.1	UNKNOWN
Ubuntu	9.04	noarch	libpng12-0	< udeb-1.2.27-2ubuntu2.1	UNKNOWN
Ubuntu	9.04	noarch	libpng12-dev	< 1.2.27-2ubuntu2.1	UNKNOWN
Ubuntu	8.10	noarch	libpng12-0	< 1.2.27-1ubuntu0.2	UNKNOWN
Ubuntu	8.10	noarch	libpng12-0-udeb	< 1.2.27-1ubuntu0.2	UNKNOWN
Ubuntu	8.10	noarch	libpng12-dev	< 1.2.27-1ubuntu0.2	UNKNOWN
Ubuntu	8.04	noarch	libpng12-0	< 1.2.15~beta5-3ubuntu0.2	UNKNOWN