FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2010-1205

This CVE name corresponds to:

Entered	Topic
2010-07-21	mozilla -- multiple vulnerabilities
2010-06-28	png -- libpng decompression buffer overflow

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2010-1205 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2010-1205
Phase	Assigned(20100330)

Description

Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.

References

Source	Reference
MLIST	[security-announce] 20100923 VMSA-2010-0014 VMware Workstation, Player, and ACE address several security issues
CONFIRM	http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=commitdiff;h=188eb6b42602bf7d7ae708a21897923b6a83fe7c#patch18
CONFIRM	http://www.libpng.org/pub/png/libpng.html
CONFIRM	https://bugzilla.redhat.com/show_bug.cgi?id=608238
CONFIRM	http://code.google.com/p/chromium/issues/detail?id=45983
CONFIRM	http://googlechromereleases.blogspot.com/2010/07/stable-channel-update.html
CONFIRM	http://trac.webkit.org/changeset/61816
CONFIRM	https://bugs.webkit.org/show_bug.cgi?id=40798
CONFIRM	http://www.mozilla.org/security/announce/2010/mfsa2010-41.html
CONFIRM	https://bugzilla.mozilla.org/show_bug.cgi?id=570451
CONFIRM	http://support.apple.com/kb/HT4312
CONFIRM	http://www.vmware.com/security/advisories/VMSA-2010-0014.html
CONFIRM	http://support.apple.com/kb/HT4435
CONFIRM	http://support.apple.com/kb/HT4456
CONFIRM	http://support.apple.com/kb/HT4457
CONFIRM	http://support.apple.com/kb/HT4554
CONFIRM	http://support.apple.com/kb/HT4566
CONFIRM	http://blackberry.com/btsc/KB27244
APPLE	APPLE-SA-2010-08-24-1
APPLE	APPLE-SA-2010-11-10-1
APPLE	APPLE-SA-2010-11-22-1
APPLE	APPLE-SA-2011-03-02-1
APPLE	APPLE-SA-2011-03-09-2
DEBIAN	DSA-2072
FEDORA	FEDORA-2010-10823
FEDORA	FEDORA-2010-10833
MANDRIVA	MDVSA-2010:133
SLACKWARE	SSA:2010-180-01
SUSE	SUSE-SR:2010:017
UBUNTU	USN-960-1
BID	41174
OVAL	oval:org.mitre.oval:def:11851
SECUNIA	40302
SECUNIA	40472
SECUNIA	40547
SECUNIA	41574
SECUNIA	42317
SECUNIA	42314
SECUNIA	40336
VUPEN	ADV-2010-1612
VUPEN	ADV-2010-1755
VUPEN	ADV-2010-1837
VUPEN	ADV-2010-1846
VUPEN	ADV-2010-1877
VUPEN	ADV-2010-2491
VUPEN	ADV-2010-3045
VUPEN	ADV-2010-3046
VUPEN	ADV-2010-1637
XF	libpng-rowdata-bo(59815)