NetSight
IP …
medium6.8

CVE-2009-0040

The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers t…

Impact

The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.

Affected products

VendorProductAffected versions
LibpngLibpng
before 1.0.43
from 1.2.0 before 1.2.35
AppleIphone Os
before 3.0
AppleMac Os X
before 10.5.8
OpensuseOpensuse
Versions 10.3, 11.0, 11.1
SuseLinux Enterprise
Versions 9.0, 10.0
SuseLinux Enterprise Desktop
Version 10
SuseLinux Enterprise Server
Version 10
DebianDebian Linux
Versions 4.0, 5.0
FedoraprojectFedora
Versions 9, 10

Weakness classification

CWE-824

References