CVE-2010-1205 - CVE House
Back to Database
Status published Critical CVE-2010-1205

Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x...

Vulnerability Description

Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-1205

Credits & Attribution

No credits recorded in the NVD database.

References

More from libpng

View All →
CVE-2019-7317
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a...
Unknown 0
CVE-2019-6129
png_create_info_struct in png.c in libpng 1.6.36 has a memory leak,...
Unknown 0
CVE-2018-14550
An issue has been found in third-party PNM decoding associated...
High 8.8
CVE-2018-14048
An issue has been found in libpng 1.6.34. It is...
Medium 6.5
CVE-2018-13785
In libpng 1.6.34, a wrong calculation of row_factor in the...
Unknown 0

Affected Vendor

Affected Software

libpng, chrome, itunes, safari, iphone os, mac os x, mac os x server, fedora, opensuse, linux enterprise server, player, workstation, ubuntu linux, debian linux, firefox, seamonkey, thunderbird
Vulnerable Versions:
0, 1.4.0, 2.0, 10.6.0, 12, 13, 11.1, 11.2, 9, 10, 11, 2.5, 3.1, 6.5.0, 7.1, 6.06, 8.04, 9.04, 9.10, 10.04, 5.0, 3.5.12, 3.0.7

Timeline

Official Publish: June 30th, 2010
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.