CVE-2010-1205
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in...
9.8 CriticalPublic exploitFix available
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
43.4%Down 39.1 points since Feb 4, 2022
What each source reports
NVD Score used
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
- Record
CVE-2010-1205- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
- Record
CVE-2010-1205- Updated
- 2026-11-02
EUVDEUVD-2010-1235 No score
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
- Record
EUVD-2010-1235- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qq2m-25fj-pxvm
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in...
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
- Record
GHSA-qq2m-25fj-pxvm- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
OSVAZL-43975
CVE-2010-1205 affecting package libpng12 1.2.57-16
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
- Record
AZL-43975- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVAZL-45408
CVE-2010-1205 affecting package libpng12 1.2.57-16
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
- Record
AZL-45408- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 10 moreShow less
OSVBELL-CVE-2010-1205
CVE-2010-1205 does not affect BellSoft software
- Record
BELL-CVE-2010-1205- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
- Record
CVE-2010-1205- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-1205
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
- Record
DEBIAN-CVE-2010-1205- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10050-1 No score
libpng16-16-1.6.26-1.1 on GA media
These are all security issues fixed in the libpng16-16-1.6.26-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10050-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10071-1 No score
MozillaFirefox-50.1.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10071-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10184-1 No score
libpng12-0-1.2.56-1.5 on GA media
These are all security issues fixed in the libpng12-0-1.2.56-1.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10184-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10218-1 No score
seamonkey-2.40-6.1 on GA media
These are all security issues fixed in the seamonkey-2.40-6.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10218-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10230-1 No score
MozillaThunderbird-45.5.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10230-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10685-1 No score
clamav-0.103.3-1.4 on GA media
These are all security issues fixed in the clamav-0.103.3-1.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10685-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libpng12Azure Linux:2 |
through 1.2.57-16 | None known |
libpng12Azure Linux:3 |
through 1.2.57-16 | None known |
tuxonice-useruiDebian:12 |
before 1.0-1, plus listed versions 0.7.2+clean-30.7.2+clean-40.7.3-1 |
1.0-1 |
libpngDebian:5.0 |
before 1.2.27-2+lenny4, plus listed versions 1.2.27-21.2.27-2+lenny21.2.27-2+lenny3 |
1.2.27-2+lenny4 |
xulrunnerDebian:5.0 |
before 1.9.0.19-3, plus listed versions 1.9.0.10-11.9.0.11-0lenny11.9.0.11-11.9.0.12-0lenny11.9.0.12-1 Show 17 moreShow less1.9.0.13-0lenny11.9.0.13-11.9.0.14-0lenny11.9.0.14-11.9.0.15-0lenny11.9.0.16-11.9.0.18-11.9.0.19-11.9.0.19-21.9.0.5-11.9.0.6-11.9.0.7-0lenny11.9.0.7-0lenny21.9.0.7-11.9.0.8-11.9.0.9-0lenny21.9.0.9-1 |
1.9.0.19-3 |
libpngRed Hat:enterprise_linux:3::as |
before 2:1.2.2-30 | 2:1.2.2-30 |
libpng-debuginfoRed Hat:enterprise_linux:3::as |
before 2:1.2.2-30 | 2:1.2.2-30 |
libpng-develRed Hat:enterprise_linux:3::as |
before 2:1.2.2-30 | 2:1.2.2-30 |
libpng10Red Hat:enterprise_linux:3::as |
before 0:1.0.13-21 | 0:1.0.13-21 |
libpng10-debuginfoRed Hat:enterprise_linux:3::as |
before 0:1.0.13-21 | 0:1.0.13-21 |
Show 154 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libpng10-develRed Hat:enterprise_linux:3::as |
before 0:1.0.13-21 | 0:1.0.13-21 |
libpngRed Hat:enterprise_linux:3::desktop |
before 2:1.2.2-30 | 2:1.2.2-30 |
libpng-debuginfoRed Hat:enterprise_linux:3::desktop |
before 2:1.2.2-30 | 2:1.2.2-30 |
libpng-develRed Hat:enterprise_linux:3::desktop |
before 2:1.2.2-30 | 2:1.2.2-30 |
libpng10Red Hat:enterprise_linux:3::desktop |
before 0:1.0.13-21 | 0:1.0.13-21 |
libpng10-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:1.0.13-21 | 0:1.0.13-21 |
libpng10-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.13-21 | 0:1.0.13-21 |
libpngRed Hat:enterprise_linux:3::es |
before 2:1.2.2-30 | 2:1.2.2-30 |
libpng-debuginfoRed Hat:enterprise_linux:3::es |
before 2:1.2.2-30 | 2:1.2.2-30 |
libpng-develRed Hat:enterprise_linux:3::es |
before 2:1.2.2-30 | 2:1.2.2-30 |
libpng10Red Hat:enterprise_linux:3::es |
before 0:1.0.13-21 | 0:1.0.13-21 |
libpng10-debuginfoRed Hat:enterprise_linux:3::es |
before 0:1.0.13-21 | 0:1.0.13-21 |
libpng10-develRed Hat:enterprise_linux:3::es |
before 0:1.0.13-21 | 0:1.0.13-21 |
libpngRed Hat:enterprise_linux:3::ws |
before 2:1.2.2-30 | 2:1.2.2-30 |
libpng-debuginfoRed Hat:enterprise_linux:3::ws |
before 2:1.2.2-30 | 2:1.2.2-30 |
libpng-develRed Hat:enterprise_linux:3::ws |
before 2:1.2.2-30 | 2:1.2.2-30 |
libpng10Red Hat:enterprise_linux:3::ws |
before 0:1.0.13-21 | 0:1.0.13-21 |
libpng10-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:1.0.13-21 | 0:1.0.13-21 |
libpng10-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.13-21 | 0:1.0.13-21 |
libpngRed Hat:enterprise_linux:4::as |
before 2:1.2.7-3.el4_8.3 | 2:1.2.7-3.el4_8.3 |
libpng-debuginfoRed Hat:enterprise_linux:4::as |
before 2:1.2.7-3.el4_8.3 | 2:1.2.7-3.el4_8.3 |
libpng-develRed Hat:enterprise_linux:4::as |
before 2:1.2.7-3.el4_8.3 | 2:1.2.7-3.el4_8.3 |
libpng10Red Hat:enterprise_linux:4::as |
before 0:1.0.16-3.el4_8.4 | 0:1.0.16-3.el4_8.4 |
libpng10-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.0.16-3.el4_8.4 | 0:1.0.16-3.el4_8.4 |
libpng10-develRed Hat:enterprise_linux:4::as |
before 0:1.0.16-3.el4_8.4 | 0:1.0.16-3.el4_8.4 |
libpngRed Hat:enterprise_linux:4::desktop |
before 2:1.2.7-3.el4_8.3 | 2:1.2.7-3.el4_8.3 |
libpng-debuginfoRed Hat:enterprise_linux:4::desktop |
before 2:1.2.7-3.el4_8.3 | 2:1.2.7-3.el4_8.3 |
libpng-develRed Hat:enterprise_linux:4::desktop |
before 2:1.2.7-3.el4_8.3 | 2:1.2.7-3.el4_8.3 |
libpng10Red Hat:enterprise_linux:4::desktop |
before 0:1.0.16-3.el4_8.4 | 0:1.0.16-3.el4_8.4 |
libpng10-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.0.16-3.el4_8.4 | 0:1.0.16-3.el4_8.4 |
libpng10-develRed Hat:enterprise_linux:4::desktop |
before 0:1.0.16-3.el4_8.4 | 0:1.0.16-3.el4_8.4 |
libpngRed Hat:enterprise_linux:4::es |
before 2:1.2.7-3.el4_8.3 | 2:1.2.7-3.el4_8.3 |
libpng-debuginfoRed Hat:enterprise_linux:4::es |
before 2:1.2.7-3.el4_8.3 | 2:1.2.7-3.el4_8.3 |
libpng-develRed Hat:enterprise_linux:4::es |
before 2:1.2.7-3.el4_8.3 | 2:1.2.7-3.el4_8.3 |
libpng10Red Hat:enterprise_linux:4::es |
before 0:1.0.16-3.el4_8.4 | 0:1.0.16-3.el4_8.4 |
libpng10-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.0.16-3.el4_8.4 | 0:1.0.16-3.el4_8.4 |
libpng10-develRed Hat:enterprise_linux:4::es |
before 0:1.0.16-3.el4_8.4 | 0:1.0.16-3.el4_8.4 |
libpngRed Hat:enterprise_linux:4::ws |
before 2:1.2.7-3.el4_8.3 | 2:1.2.7-3.el4_8.3 |
libpng-debuginfoRed Hat:enterprise_linux:4::ws |
before 2:1.2.7-3.el4_8.3 | 2:1.2.7-3.el4_8.3 |
libpng-develRed Hat:enterprise_linux:4::ws |
before 2:1.2.7-3.el4_8.3 | 2:1.2.7-3.el4_8.3 |
libpng10Red Hat:enterprise_linux:4::ws |
before 0:1.0.16-3.el4_8.4 | 0:1.0.16-3.el4_8.4 |
libpng10-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.0.16-3.el4_8.4 | 0:1.0.16-3.el4_8.4 |
libpng10-develRed Hat:enterprise_linux:4::ws |
before 0:1.0.16-3.el4_8.4 | 0:1.0.16-3.el4_8.4 |
libpngRed Hat:enterprise_linux:5::client_workstation |
before 2:1.2.10-7.1.el5_5.3 | 2:1.2.10-7.1.el5_5.3 |
libpng-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 2:1.2.10-7.1.el5_5.3 | 2:1.2.10-7.1.el5_5.3 |
libpng-develRed Hat:enterprise_linux:5::client_workstation |
before 2:1.2.10-7.1.el5_5.3 | 2:1.2.10-7.1.el5_5.3 |
libpngRed Hat:enterprise_linux:5::client |
before 2:1.2.10-7.1.el5_5.3 | 2:1.2.10-7.1.el5_5.3 |
libpng-debuginfoRed Hat:enterprise_linux:5::client |
before 2:1.2.10-7.1.el5_5.3 | 2:1.2.10-7.1.el5_5.3 |
libpng-develRed Hat:enterprise_linux:5::client |
before 2:1.2.10-7.1.el5_5.3 | 2:1.2.10-7.1.el5_5.3 |
libpngRed Hat:enterprise_linux:5::server |
before 2:1.2.10-7.1.el5_5.3 | 2:1.2.10-7.1.el5_5.3 |
libpng-debuginfoRed Hat:enterprise_linux:5::server |
before 2:1.2.10-7.1.el5_5.3 | 2:1.2.10-7.1.el5_5.3 |
libpng-develRed Hat:enterprise_linux:5::server |
before 2:1.2.10-7.1.el5_5.3 | 2:1.2.10-7.1.el5_5.3 |
thunderbirdRed Hat:enterprise_linux:5::client |
before 0:2.0.0.24-6.el5 | 0:2.0.0.24-6.el5 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.0.0.24-6.el5 | 0:2.0.0.24-6.el5 |
thunderbirdRed Hat:rhel_productivity:5 |
before 0:2.0.0.24-6.el5 | 0:2.0.0.24-6.el5 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 |
before 0:2.0.0.24-6.el5 | 0:2.0.0.24-6.el5 |
seamonkeyRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkeyRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.9-0.57.el3 | 0:1.0.9-0.57.el3 |
seamonkeyRed Hat:enterprise_linux:4::as |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkeyRed Hat:enterprise_linux:4::es |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws |
before 0:1.0.9-60.el4 | 0:1.0.9-60.el4 |
firefoxRed Hat:enterprise_linux:4::as |
before 0:3.6.7-2.el4 | 0:3.6.7-2.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as |
before 0:3.6.7-2.el4 | 0:3.6.7-2.el4 |
firefoxRed Hat:enterprise_linux:4::desktop |
before 0:3.6.7-2.el4 | 0:3.6.7-2.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:3.6.7-2.el4 | 0:3.6.7-2.el4 |
firefoxRed Hat:enterprise_linux:4::es |
before 0:3.6.7-2.el4 | 0:3.6.7-2.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es |
before 0:3.6.7-2.el4 | 0:3.6.7-2.el4 |
firefoxRed Hat:enterprise_linux:4::ws |
before 0:3.6.7-2.el4 | 0:3.6.7-2.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:3.6.7-2.el4 | 0:3.6.7-2.el4 |
xulrunnerRed Hat:enterprise_linux:5::client_workstation |
before 0:1.9.2.7-2.el5 | 0:1.9.2.7-2.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:1.9.2.7-2.el5 | 0:1.9.2.7-2.el5 |
xulrunner-develRed Hat:enterprise_linux:5::client_workstation |
before 0:1.9.2.7-2.el5 | 0:1.9.2.7-2.el5 |
firefoxRed Hat:enterprise_linux:5::client |
before 0:3.6.7-2.el5 | 0:3.6.7-2.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client |
before 0:3.6.7-2.el5 | 0:3.6.7-2.el5 |
xulrunnerRed Hat:enterprise_linux:5::client |
before 0:1.9.2.7-2.el5 | 0:1.9.2.7-2.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::client |
before 0:1.9.2.7-2.el5 | 0:1.9.2.7-2.el5 |
xulrunner-develRed Hat:enterprise_linux:5::client |
before 0:1.9.2.7-2.el5 | 0:1.9.2.7-2.el5 |
firefoxRed Hat:enterprise_linux:5::server |
before 0:3.6.7-2.el5 | 0:3.6.7-2.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.6.7-2.el5 | 0:3.6.7-2.el5 |
xulrunnerRed Hat:enterprise_linux:5::server |
before 0:1.9.2.7-2.el5 | 0:1.9.2.7-2.el5 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server |
before 0:1.9.2.7-2.el5 | 0:1.9.2.7-2.el5 |
xulrunner-develRed Hat:enterprise_linux:5::server |
before 0:1.9.2.7-2.el5 | 0:1.9.2.7-2.el5 |
libpng16openSUSE:Tumbleweed |
before 1.6.26-1.1 | 1.6.26-1.1 |
MozillaFirefoxopenSUSE:Tumbleweed |
before 50.1.0-1.1 | 50.1.0-1.1 |
MozillaThunderbirdopenSUSE:Tumbleweed |
before 45.5.1-1.1 | 45.5.1-1.1 |
clamavopenSUSE:Tumbleweed |
before 0.103.3-1.4 | 0.103.3-1.4 |
firefox-esropenSUSE:Tumbleweed |
before 128.5.1-1.1 | 128.5.1-1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | libpng 1.4.2 - Denial of Service | 2010-07-20 |
| PoC in GitHub | mk219533/CVE-2010-1205 | 2010-09-14 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-1205 is a critical vulnerability (CVSS 9.8) in Libpng, published June 30, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 43.4%, the 98th percentile. Fixed in tuxonice-userui 1.0-1.
References
mandriva.com/security/advisories?name=MDVSA-2010:133
vmware.com/security/advisories/VMSA-2010-0014.html
securityfocus.com/bid/41174
vupen.com/english/advisories/2010/1877
googlechromereleases.blogspot.com/2010/07/stable-channel-update.html
Show 194 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/59815
support.apple.com/kb/HT4435
mozilla.org/security/announce/2010/mfsa2010-41.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11851
bugzilla.mozilla.org/show_bug.cgi?id=570451
secunia.com/advisories/40472
lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
ubuntu.com/usn/USN-960-1
blackberry.com/btsc/KB27244
libpng.org/pub/png/libpng.html
lists.vmware.com/pipermail/security-announce/2010/000105.html
lists.fedoraproject.org/pipermail/package-announce/2010-July/044283.html
debian.org/security/2010/dsa-2072
lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.613061
bugs.webkit.org/show_bug.cgi?id=40798
trac.webkit.org/changeset/61816
libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=188eb6b42602bf7d7ae708a21897923b6a83fe7c
code.google.com/p/chromium/issues/detail?id=45983
bugzilla.redhat.com/show_bug.cgi?id=608238
nvd.nist.gov/vuln/detail/CVE-2010-1205
github.com/advisories/GHSA-qq2m-25fj-pxvm
docs.bell-sw.com/security/cves/CVE-2010-1205
security-tracker.debian.org/tracker/CVE-2010-1205
access.redhat.com/errata/RHSA-2010:0534
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0534.json
cve.org/CVERecord?id=CVE-2009-2042
suse.com/security/cve/CVE-2010-1205
This page doesn't list everything
Left out here: 2,139 references. The JSON record has them.