NetSight
IP …
medium4.3

CVE-2010-0205

The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed …

Impact

The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of service (memory and CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate compression method on data composed of many occurrences of the same character, related to a "decompression bomb" attack.

Affected products

VendorProductAffected versions
LibpngLibpng
from 1.0.0 before 1.0.53
from 1.2.0 before 1.2.43
from 1.4.0 before 1.4.1
AppleMac Os X
before 10.6.5
FedoraprojectFedora
Versions 11, 12, 13
OpensuseOpensuse
Versions 11.0, 11.1, 11.2
SuseLinux Enterprise Server
Versions 9, 10, 11
CanonicalUbuntu Linux
Versions 6.06, 8.04, 8.10, 9.04, 9.10
DebianDebian Linux
Versions 5.0, 6.0

Weakness classification

CWE-400

References