Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-960-1
HistoryJul 08, 2010 - 12:00 a.m.

libpng vulnerabilities

2010-07-0800:00:00
ubuntu.com
37

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.629 Medium

EPSS

Percentile

97.8%

JSON

Releases

  • Ubuntu 10.04
  • Ubuntu 9.10
  • Ubuntu 9.04
  • Ubuntu 8.04
  • Ubuntu 6.06

Packages

  • libpng -

Details

It was discovered that libpng did not properly handle certain malformed PNG
images. If a user or automated system were tricked into opening a crafted
PNG file, an attacker could cause a denial of service or possibly execute
arbitrary code with the privileges of the user invoking the program.
(CVE-2010-1205)

It was discovered that libpng did not properly handle certain malformed PNG
images. If a user or automated system were tricked into processing a
crafted PNG image, an attacker could possibly use this flaw to consume all
available resources, resulting in a denial of service. (CVE-2010-2249)

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchlibpng12-0< 1.2.37-1ubuntu0.2UNKNOWN
Ubuntu9.10noarchlibpng12-0-udeb< 1.2.37-1ubuntu0.2UNKNOWN
Ubuntu9.10noarchlibpng12-dev< 1.2.37-1ubuntu0.2UNKNOWN
Ubuntu9.04noarchlibpng12-0< 1.2.27-2ubuntu2.2UNKNOWN
Ubuntu9.04noarchlibpng12-0-udeb< 1.2.27-2ubuntu2.2UNKNOWN
Ubuntu9.04noarchlibpng12-dev< 1.2.27-2ubuntu2.2UNKNOWN
Ubuntu8.04noarchlibpng12-0< 1.2.15~beta5-3ubuntu0.3UNKNOWN
Ubuntu8.04noarchlibpng12-0-udeb< 1.2.15~beta5-3ubuntu0.3UNKNOWN
Ubuntu8.04noarchlibpng12-dev< 1.2.15~beta5-3ubuntu0.3UNKNOWN
Ubuntu6.06noarchlibpng12-0< 1.2.8rel-5ubuntu0.6UNKNOWN
Rows per page:
1-10 of 151

Related

nessus 47
openvas 81
fedora 23
slackware 1
altlinux 2
securityvulns 3
debian 5
osv 2
gentoo 1
oraclelinux 3
centos 3
redhat 4
veracode 2
cve 2
ubuntucve 2
debiancve 2
prion 2
packetstorm 1
cert 1
freebsd 2
exploitpack 1
mozilla 1
checkpoint_advisories 1
seebug 1
vmware 2
exploitdb 1
ibm 1
ubuntu 2
nessus
nessus
Fedora 12 : libpng-1.2.44-1.fc12 (2010-10592)
2010-07-06 00:00:00
Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : libpng vulnerabilities (USN-960-1)
2010-07-09 00:00:00
SuSE9 Security Update : libpng (YOU Patch Number 12642)
2010-09-12 00:00:00
openvas
openvas
Fedora Update for libpng10 FEDORA-2010-10823
2010-07-23 00:00:00
Fedora Update for mingw32-libpng FEDORA-2010-10776
2010-07-30 00:00:00
Slackware: Security Advisory (SSA:2010-180-01)
2012-09-10 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: libpng10-1.0.54-1.fc13
2010-07-20 22:32:04
[SECURITY] Fedora 12 Update: mingw32-libpng-1.2.44-1.fc12
2010-07-27 02:50:29
[SECURITY] Fedora 13 Update: mingw32-libpng-1.2.44-1.fc13
2010-07-27 02:50:02
slackware
slackware
[slackware-security] libpng
2010-06-30 06:39:45
altlinux
altlinux
Security fix for the ALT Linux 6 package libpng version 1.2.44-alt1
2010-06-29 00:00:00
Security fix for the ALT Linux 5 package libpng version 1.2.44-alt1
2010-06-29 00:00:00
securityvulns
securityvulns
[USN-960-1] libpng vulnerabilities
2010-07-11 00:00:00
libpng multiple security vulnerabilities
2010-07-11 00:00:00
Mozilla Foundation Security Advisory 2010-41
2010-07-24 00:00:00
debian
debian
[SECURITY] [DSA 2072-1] New libpng packages fix several vulnerabilities
2010-07-19 12:27:36
[SECURITY] [DSA 2072-1] New libpng packages fix several vulnerabilities
2010-07-19 12:27:24
[SECURITY] [DSA 2075-1] New xulrunner packages fix several vulnerabilities
2010-07-27 19:47:58
osv
osv
libpng - several vulnerabilities
2010-07-19 00:00:00
xulrunner - several vulnerabilities
2010-07-27 00:00:00
gentoo
gentoo
Libpng: Multiple vulnerabilities
2010-10-05 00:00:00
oraclelinux
oraclelinux
libpng security update
2010-07-14 00:00:00
seamonkey security update
2010-07-21 00:00:00
firefox security update
2010-07-21 00:00:00
centos
centos
libpng, libpng10 security update
2010-07-14 22:40:18
seamonkey security update
2010-08-16 21:36:58
thunderbird security update
2010-07-22 14:50:56
redhat
redhat
(RHSA-2010:0534) Important: libpng security update
2010-07-14 00:00:00
(RHSA-2010:0546) Critical: seamonkey security update
2010-07-20 00:00:00
(RHSA-2010:0545) Critical: thunderbird security update
2010-07-20 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:43:56
Arbitrary Code Execution
2020-04-10 00:43:55
cve
cve
CVE-2010-2249
2010-06-30 18:30:00
CVE-2010-1205
2010-06-30 18:30:00
ubuntucve
ubuntucve
CVE-2010-2249
2010-06-30 00:00:00
CVE-2010-1205
2010-06-30 00:00:00
debiancve
debiancve
CVE-2010-2249
2010-06-30 18:30:00
CVE-2010-1205
2010-06-30 18:30:00
prion
prion
Memory corruption
2010-06-30 18:30:00
Buffer overflow
2010-06-30 18:30:00
packetstorm
packetstorm
libpng 1.4.2 Denial Of Service
2010-07-21 00:00:00
cert
cert
libpng fails to limit number of rows in header
2010-07-02 00:00:00
freebsd
freebsd
png -- libpng decompression buffer overflow
2010-03-30 00:00:00
mozilla -- multiple vulnerabilities
2010-07-20 00:00:00
exploitpack
exploitpack
libpng 1.4.2 - Denial of Service
2010-07-20 00:00:00
mozilla
mozilla
Remote code execution using malformed PNG image — Mozilla
2010-07-20 00:00:00
checkpoint_advisories
checkpoint_advisories
Incorrect libpng Usage Heap Overflow- Ver2 (CVE-2010-1205)
2015-05-18 00:00:00
seebug
seebug
libpng <= 1.4.2 - Denial of Service Vulnerability
2014-07-01 00:00:00
vmware
vmware
VMware Workstation, Player, and ACE address several security issues.
2010-09-23 00:00:00
VMware Workstation, Player, and ACE address several security issues.
2010-09-23 00:00:00
exploitdb
exploitdb
libpng 1.4.2 - Denial of Service
2010-07-20 00:00:00
ibm
ibm
Security Bulletin: Security vulnerability has been identified in BigFix Platform shipped with IBM License Metric Tool.
2020-08-12 08:19:22
ubuntu
ubuntu
Thunderbird vulnerabilities
2010-07-26 00:00:00
Firefox and Xulrunner vulnerabilities
2010-07-23 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.629 Medium

EPSS

Percentile

97.8%

JSON
Related for USN-960-1
nessus47openvas81fedora23slackware1altlinux2securityvulns3debian5osv2gentoo1oraclelinux3centos3redhat4veracode2cve2ubuntucve2debiancve2prion2packetstorm1cert1freebsd2exploitpack1mozilla1checkpoint_advisories1seebug1vmware2exploitdb1ibm1ubuntu2