CVE-2010-2350
Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a...
CVE-2010-2350 is a medium vulnerability (CVSS 6.8) in Daniel Mealha Cabrita Ziproxy, published June 21, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.30%, the 88th percentile. Fixed in ziproxy 3.1.1-1.
Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNG file.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNG file.
- Record
CVE-2010-2350- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNG file.
- Record
CVE-2010-2350- Updated
- 2026-11-02
EUVDEUVD-2010-2360 No score
Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNG file.
- Record
EUVD-2010-2360- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vr3x-5p25-4vw9 No score
Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a...
Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNG file.
- Record
GHSA-vr3x-5p25-4vw9- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNG file.
- Record
CVE-2010-2350- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-2350 No score
Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNG file.
- Record
DEBIAN-CVE-2010-2350- Updated
- 2026-11-02
OSVUBUNTU-CVE-2010-2350 No score
Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNG file.
- Record
UBUNTU-CVE-2010-2350- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | affected | |
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/40156
vupen.com/english/advisories/2010/1501
exchange.xforce.ibmcloud.com/vulnerabilities/59510
ziproxy.cvs.sourceforge.net/viewvc/ziproxy/ziproxy-default/ChangeLog?revision=1.240&view=markup
nvd.nist.gov/vuln/detail/CVE-2010-2350
github.com/advisories/GHSA-vr3x-5p25-4vw9
security-tracker.debian.org/tracker/CVE-2010-2350
ubuntu.com/security/CVE-2010-2350
cve.org/CVERecord?id=CVE-2010-2350