NetSight
IP …
critical9.8Public exploit code

CVE-2010-1205

Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbi…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.

Affected products

VendorProductAffected versions
LibpngLibpng
before 1.2.44
from 1.4.0 before 1.4.3
GoogleChrome
before 5.0.375.99
AppleItunes
before 10.2
AppleSafari
before 5.0.4
AppleIphone Os
from 2.0 through 4.1
AppleMac Os X
from 10.6.0 before 10.6.4
AppleMac Os X Server
from 10.6.0 before 10.6.4
FedoraprojectFedora
Versions 12, 13
OpensuseOpensuse
Versions 11.1, 11.2
SuseLinux Enterprise Server
Versions 9, 10, 11
VmwarePlayer
from 2.5 before 2.5.5
from 3.1 before 3.1.2
VmwareWorkstation
from 6.5.0 before 6.5.5
from 7.1 before 7.1.2

Weakness classification

CWE-120

References