Critical severity9.8NVD Advisory· Published Jun 30, 2010· Updated Jun 16, 2026
CVE-2010-1205
CVE-2010-1205
Description
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
32cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*+ 4 more
- cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*
- osv-coords5 versionspkg:rpm/opensuse/clamav&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/libpng16&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Tumbleweed
< 0.103.3-1.4+ 4 more
- (no CPE)range: < 0.103.3-1.4
- (no CPE)range: < 128.5.1-1.1
- (no CPE)range: < 1.6.26-1.1
- (no CPE)range: < 50.1.0-1.1
- (no CPE)range: < 45.5.1-1.1
Patches
Vulnerability mechanics
References
49- lists.vmware.com/pipermail/security-announce/2010/000105.htmlnvdMailing ListPatchThird Party Advisory
- slackware.com/security/viewer.phpnvdMailing ListPatchThird Party Advisory
- trac.webkit.org/changeset/61816nvdPatchThird Party Advisory
- www.vmware.com/security/advisories/VMSA-2010-0014.htmlnvdPatchThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- code.google.com/p/chromium/issues/detailnvdExploitIssue TrackingMailing ListThird Party Advisory
- bugzilla.mozilla.org/show_bug.cginvdExploitIssue TrackingThird Party Advisory
- googlechromereleases.blogspot.com/2010/07/stable-channel-update.htmlnvdRelease NotesThird Party Advisory
- lists.apple.com/archives/security-announce/2010//Aug/msg00003.htmlnvdMailing ListThird Party Advisory
- lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlnvdMailing ListThird Party Advisory
- lists.apple.com/archives/security-announce/2010//Nov/msg00003.htmlnvdMailing ListThird Party Advisory
- lists.apple.com/archives/security-announce/2011//Mar/msg00004.htmlnvdMailing ListThird Party Advisory
- lists.apple.com/archives/security-announce/2011/Mar/msg00000.htmlnvdMailing ListThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2010-July/044283.htmlnvdMailing ListThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2010-July/044397.htmlnvdMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.htmlnvdMailing ListThird Party Advisory
- support.apple.com/kb/HT4312nvdThird Party Advisory
- support.apple.com/kb/HT4456nvdThird Party Advisory
- support.apple.com/kb/HT4457nvdThird Party Advisory
- support.apple.com/kb/HT4554nvdThird Party Advisory
- www.debian.org/security/2010/dsa-2072nvdThird Party Advisory
- www.libpng.org/pub/png/libpng.htmlnvdProductVendor Advisory
- www.mozilla.org/security/announce/2010/mfsa2010-41.htmlnvdThird Party Advisory
- www.securityfocus.com/bid/41174nvdThird Party AdvisoryVDB Entry
- www.ubuntu.com/usn/USN-960-1nvdThird Party Advisory
- bugs.webkit.org/show_bug.cginvdPermissions RequiredThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/59815nvdThird Party AdvisoryVDB Entry
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11851nvdThird Party Advisory
- blackberry.com/btsc/KB27244nvdBroken Link
- secunia.com/advisories/40302nvdBroken Link
- secunia.com/advisories/40336nvdBroken Link
- secunia.com/advisories/40472nvdBroken Link
- secunia.com/advisories/40547nvdBroken Link
- secunia.com/advisories/41574nvdBroken Link
- secunia.com/advisories/42314nvdBroken Link
- secunia.com/advisories/42317nvdBroken Link
- support.apple.com/kb/HT4435nvdBroken Link
- support.apple.com/kb/HT4566nvdBroken Link
- www.mandriva.com/security/advisoriesnvdBroken Link
- www.vupen.com/english/advisories/2010/1612nvdBroken Link
- www.vupen.com/english/advisories/2010/1637nvdBroken Link
- www.vupen.com/english/advisories/2010/1755nvdBroken Link
- www.vupen.com/english/advisories/2010/1837nvdBroken Link
- www.vupen.com/english/advisories/2010/1846nvdBroken Link
- www.vupen.com/english/advisories/2010/1877nvdBroken Link
- www.vupen.com/english/advisories/2010/2491nvdBroken Link
- www.vupen.com/english/advisories/2010/3045nvdBroken Link
- www.vupen.com/english/advisories/2010/3046nvdBroken Link
- libpng.git.sourceforge.net/git/gitweb.cginvd
News mentions
0No linked articles in our index yet.