VYPR
Critical severity9.8NVD Advisory· Published Jun 30, 2010· Updated Apr 29, 2026

CVE-2010-1205

CVE-2010-1205

Description

Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.

Affected products

26
  • cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*
    Range: <10.2
  • cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
    Range: <5.0.4
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
    Range: <5.0.375.99
  • cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*
    Range: <1.2.44
  • cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
    Range: <3.5.11
  • cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
    Range: <2.0.6
  • cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
    Range: <3.0.6
  • cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*
    Range: >=2.5,<2.5.5
  • cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*
    Range: >=6.5.0,<6.5.5
  • cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
    Range: >=2.0,<=4.1
  • cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
    Range: >=10.6.0,<10.6.4
  • cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*
    Range: >=10.6.0,<10.6.4
  • cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*+ 4 more
    • cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*
  • OpenSUSE/openSUSE2 versions
    cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*
    • cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:*:*:*:*
    • cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*
    • cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:*:*:*
    • cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

49

News mentions

0

No linked articles in our index yet.