CyberSec.Space Logo
CVEブラウザに戻る

CVE-2010-1205

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1980%
EPSS Percentile18.73th
Published2010年6月30日
Last Modified2026年4月29日

Vulnerability Description

Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.

Affected Platforms (CPE)

📦
Libpng

Libpng

< 1.2.44
📦
Libpng

Libpng

>= 1.4.0 and < 1.4.3
📦
Google

Chrome

< 5.0.375.99
📦
Apple

Itunes

< 10.2
📦
Apple

Safari

< 5.0.4
💻
Apple

Iphone Os

>= 2.0 and <= 4.1
💻
Apple

Mac Os X

>= 10.6.0 and < 10.6.4
💻
Apple

Mac Os X Server

>= 10.6.0 and < 10.6.4
💻
Fedoraproject

Fedora

= 12
💻
Fedoraproject

Fedora

= 13
💻
Opensuse

Opensuse

= 11.1
💻
Opensuse

Opensuse

= 11.2
💻
Suse

Linux Enterprise Server

= 9
💻
Suse

Linux Enterprise Server

= 10
💻
Suse

Linux Enterprise Server

= 11
💻
Suse

Linux Enterprise Server

= 11
📦
Vmware

Player

>= 2.5 and < 2.5.5
📦
Vmware

Player

>= 3.1 and < 3.1.2
📦
Vmware

Workstation

>= 6.5.0 and < 6.5.5
📦
Vmware

Workstation

>= 7.1 and < 7.1.2
💻
Canonical

Ubuntu Linux

= 6.06
💻
Canonical

Ubuntu Linux

= 8.04
💻
Canonical

Ubuntu Linux

= 9.04
💻
Canonical

Ubuntu Linux

= 9.10
💻
Canonical

Ubuntu Linux

= 10.04
💻
Debian

Debian Linux

= 5.0
📦
Mozilla

Firefox

< 3.5.11
📦
Mozilla

Firefox

>= 3.5.12 and < 3.6.7
📦
Mozilla

Seamonkey

< 2.0.6
📦
Mozilla

Thunderbird

< 3.0.6
📦
Mozilla

Thunderbird

>= 3.0.7 and < 3.1.1

References & Advisories

関連する脆弱性情報