CVE-2010-2249
published 2010-06-30CVE-2010-2249: Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and…
PriorityP423medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
2.63%
83.8th percentile
Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks.
Affected
27 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | iphone_os | 2.0 – 4.1 | — |
| apple | itunes | < 10.2 | 10.2 |
| apple | safari | < 5.0.4 | 5.0.4 |
| apple | tvos | < 4.1.0 | 4.1.0 |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | tuxonice-userui | < tuxonice-userui 1.0-1 (bookworm) | tuxonice-userui 1.0-1 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| libpng | libpng | < 1.2.44 | 1.2.44 |
| libpng | libpng | >= 1.4.0 < 1.4.3 | 1.4.3 |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| suse | linux_enterprise_server | — | — |
| suse | linux_enterprise_server | — | — |
| suse | linux_enterprise_server | — | — |
| vmware | esxi | — | — |
| vmware | player | >= 2.5 < 2.5.5 | 2.5.5 |
| vmware | player | >= 3.1 < 3.1.2 | 3.1.2 |
| vmware | vmware_tools | — | — |
| vmware | vmware_workstation | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv6.5MEDIUM
vendor_ubuntu9.8CRITICAL
vendor_debian6.5LOW
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VMware
VMware Workstation, Player, and ACE address several security issues.
vendor_vmware·2010-09-23·CVSS 2.1
CVE-2010-0205 [LOW] VMware Workstation, Player, and ACE address several security issues.
VMSA-2010-0014: VMware Workstation, Player, and ACE address several security issues.
a. VMware Workstation and Player installer security issue The Workstation 7.x and Player 3.x installers will load an index.htm file located in the current working directory on which Workstation 7.x or Player 3.x is being installed. This may allow an attacker to display a malicious file if they manage to get their file onto the system prior to installation. The issue can only be exploited at the time that Workstation 7.x or Player 3.x is being installed. Installed versions of Workstation and Player are not affected. The security issue is no longer present in the installer of the new versions of Workstation 7.x and Player 3.x (see table below for the version numbers). The Common Vulnerabilities and Exposure
Ubuntu
libpng vulnerabilities
vendor_ubuntu·2010-07-08·CVSS 9.8
CVE-2010-2249 [CRITICAL] libpng vulnerabilities
Title: libpng vulnerabilities
It was discovered that libpng did not properly handle certain malformed PNG
images. If a user or automated system were tricked into opening a crafted
PNG file, an attacker could cause a denial of service or possibly execute
arbitrary code with the privileges of the user invoking the program.
(CVE-2010-1205)
It was discovered that libpng did not properly handle certain malformed PNG
images. If a user or automated system were tricked into processing a
crafted PNG image, an attacker could possibly use this flaw to consume all
available resources, resulting in a denial of service. (CVE-2010-2249)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
Red Hat
libpng: Memory leak when processing Physical Scale (sCAL) images
vendor_redhat·2010-06-25·CVSS 6.5
CVE-2010-2249 [MEDIUM] CWE-401 libpng: Memory leak when processing Physical Scale (sCAL) images
libpng: Memory leak when processing Physical Scale (sCAL) images
Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks.
Package: libpng (Red Hat Enterprise Linux 6) - Not affected
Debian
CVE-2010-2249: tuxonice-userui - Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allow...
vendor_debian·2010·CVSS 6.5
CVE-2010-2249 [MEDIUM] CVE-2010-2249: tuxonice-userui - Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allow...
Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks.
Scope: local
bookworm: resolved (fixed in 1.0-1)
bullseye: resolved (fixed in 1.0-1)
GHSA
GHSA-2r3r-854p-xjfr: Memory leak in pngrutil
ghsa_unreviewed·2022-05-13
CVE-2010-2249 [MEDIUM] CWE-401 GHSA-2r3r-854p-xjfr: Memory leak in pngrutil
Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks.
OSV
CVE-2010-2249: Memory leak in pngrutil
osv·2010-06-30·CVSS 6.5
CVE-2010-2249 [MEDIUM] CVE-2010-2249: Memory leak in pngrutil
Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2010-1205 CVE-2010-2249 mingw32-libpng various flaws [fedora-all]
bugzilla·2010-06-29·CVSS 9.8
CVE-2010-1205 [CRITICAL] CVE-2010-1205 CVE-2010-2249 mingw32-libpng various flaws [fedora-all]
CVE-2010-1205 CVE-2010-2249 mingw32-libpng various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
Forr more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include the bug IDs of the
respective parent bugs filed against the "Security Response" product.
Please mention CVE ids in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=security&bugs=608644
Please note: this issue affects multiple sup
Bugzilla
CVE-2010-1205 CVE-2010-2249 libpng various flaws [fedora-all]
bugzilla·2010-06-29·CVSS 9.8
CVE-2010-1205 [CRITICAL] CVE-2010-1205 CVE-2010-2249 libpng various flaws [fedora-all]
CVE-2010-1205 CVE-2010-2249 libpng various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
Forr more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include the bug IDs of the
respective parent bugs filed against the "Security Response" product.
Please mention CVE ids in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=security&bugs=608644
Please note: this issue affects multiple supported v
Bugzilla
CVE-2010-2249 libpng: Memory leak when processing Physical Scale (sCAL) images
bugzilla·2010-06-28·CVSS 6.5
CVE-2010-2249 [MEDIUM] CVE-2010-2249 libpng: Memory leak when processing Physical Scale (sCAL) images
CVE-2010-2249 libpng: Memory leak when processing Physical Scale (sCAL) images
A memory leak was found in the way libpng processed malformed Portable Network
Graphics (PNG) images with Physical Scale (sCAL) extension. A remote attacker
could create a specially-crafted PNG image and trick the local user into
opening it in an application, using the libpng library, leading to denial
of service (relevant libpng-based application crash).
References:
[1] http://www.libpng.org/pub/png/libpng.html
CVE Request:
[2] http://www.openwall.com/lists/oss-security/2010/06/28/2
Discussion:
This issue affects the versions of the libpng package, as shipped
with Red Hat Enteprise Linux 3, 4, and 5.
This issue affects the versions of the libpng package, as shipped
with Fedora release of 12 and 13.
---
arXiv
One Bad Apple Spoils the Barrel: Understanding the Security Risks Introduced by Third-Party Components in IoT Firmware
arxiv_fulltext·2022-12-29
One Bad Apple Spoils the Barrel: Understanding the Security Risks Introduced by Third-Party Components in IoT Firmware
One Bad Apple Spoils the Barrel: Understanding the Security Risks Introduced by Third-Party Components in IoT Firmware
## Abstract
Currently, the development of IoT firmware heavily depends on third-party components (TPCs) to improve development efficiency. Nevertheless, TPCs are not secure, and the vulnerabilities in TPCs will influence the security of IoT firmware. Existing works pay less attention to the vulnerabilities caused by TPCs, and we still lack a comprehensive understanding of the security impact of TPC vulnerability against firmware. To fill in the knowledge gap, we design and implement , which leverages syntactical features and control-flow graph features to detect the TPCs in firmware, and then recognizes the corresponding vulnerabilities. Based on , we present the first l
http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=90cfcecc09febb8d6c8c1d37ea7bb7cf0f4b00f3#patch20http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2010//Nov/msg00003.htmlhttp://lists.apple.com/archives/security-announce/2011//Mar/msg00004.htmlhttp://lists.apple.com/archives/security-announce/2011/Mar/msg00000.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-July/044283.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-July/044397.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.htmlhttp://lists.vmware.com/pipermail/security-announce/2010/000105.htmlhttp://secunia.com/advisories/40302http://secunia.com/advisories/40336http://secunia.com/advisories/40472http://secunia.com/advisories/40547http://secunia.com/advisories/41574http://secunia.com/advisories/42314http://secunia.com/advisories/42317http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.613061http://support.apple.com/kb/HT4435http://support.apple.com/kb/HT4456http://support.apple.com/kb/HT4457http://support.apple.com/kb/HT4554http://support.apple.com/kb/HT4566http://www.debian.org/security/2010/dsa-2072http://www.libpng.org/pub/png/libpng.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2010:133http://www.securityfocus.com/bid/41174http://www.securitytracker.com/id?1024723http://www.ubuntu.com/usn/USN-960-1http://www.vmware.com/security/advisories/VMSA-2010-0014.htmlhttp://www.vupen.com/english/advisories/2010/1612http://www.vupen.com/english/advisories/2010/1637http://www.vupen.com/english/advisories/2010/1755http://www.vupen.com/english/advisories/2010/1837http://www.vupen.com/english/advisories/2010/1846http://www.vupen.com/english/advisories/2010/1877http://www.vupen.com/english/advisories/2010/2491http://www.vupen.com/english/advisories/2010/3045http://www.vupen.com/english/advisories/2010/3046https://bugzilla.redhat.com/show_bug.cgi?id=608644https://exchange.xforce.ibmcloud.com/vulnerabilities/59816http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=90cfcecc09febb8d6c8c1d37ea7bb7cf0f4b00f3#patch20http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2010//Nov/msg00003.htmlhttp://lists.apple.com/archives/security-announce/2011//Mar/msg00004.htmlhttp://lists.apple.com/archives/security-announce/2011/Mar/msg00000.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-July/044283.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-July/044397.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.htmlhttp://lists.vmware.com/pipermail/security-announce/2010/000105.htmlhttp://secunia.com/advisories/40302http://secunia.com/advisories/40336http://secunia.com/advisories/40472http://secunia.com/advisories/40547http://secunia.com/advisories/41574http://secunia.com/advisories/42314http://secunia.com/advisories/42317http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.613061http://support.apple.com/kb/HT4435http://support.apple.com/kb/HT4456http://support.apple.com/kb/HT4457http://support.apple.com/kb/HT4554http://support.apple.com/kb/HT4566http://www.debian.org/security/2010/dsa-2072http://www.libpng.org/pub/png/libpng.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2010:133http://www.securityfocus.com/bid/41174http://www.securitytracker.com/id?1024723http://www.ubuntu.com/usn/USN-960-1http://www.vmware.com/security/advisories/VMSA-2010-0014.htmlhttp://www.vupen.com/english/advisories/2010/1612http://www.vupen.com/english/advisories/2010/1637http://www.vupen.com/english/advisories/2010/1755http://www.vupen.com/english/advisories/2010/1837http://www.vupen.com/english/advisories/2010/1846http://www.vupen.com/english/advisories/2010/1877http://www.vupen.com/english/advisories/2010/2491http://www.vupen.com/english/advisories/2010/3045http://www.vupen.com/english/advisories/2010/3046https://bugzilla.redhat.com/show_bug.cgi?id=608644https://exchange.xforce.ibmcloud.com/vulnerabilities/59816
2010-06-30
Published