NetSight
IP …
medium6.5

CVE-2010-2249

Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and applica…

Impact

Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks.

Affected products

VendorProductAffected versions
LibpngLibpng
before 1.2.44
from 1.4.0 before 1.4.3
AppleItunes
before 10.2
AppleSafari
before 5.0.4
AppleIphone Os
from 2.0 through 4.1
AppleTvos
before 4.1.0
FedoraprojectFedora
Versions 12, 13
OpensuseOpensuse
Versions 11.1, 11.2
SuseLinux Enterprise Server
Versions 9, 10, 11
VmwarePlayer
from 2.5 before 2.5.5
from 3.1 before 3.1.2
VmwareWorkstation
from 6.5.0 before 6.5.5
from 7.1 before 7.1.2
CanonicalUbuntu Linux
Versions 6.06, 8.04, 9.04, 9.10, 10.04
DebianDebian Linux
Version 5.0

Weakness classification

CWE-401

References