Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Jun 25, 2026 | Jan 5, 2024 |
| Apple Osx Imageio | — | Upgrade macOS to the latest versionApply OS X security update 2010-007 | Dec 16, 2011 | Jun 30, 2010 |
| Apple Osx Php | — | Apply OS X security update 2010-005 | Dec 16, 2011 | Jun 30, 2010 |
| Apple Osx X11 | — | Apply OS X security update 2010-007Upgrade macOS to the latest version | Dec 16, 2011 | Jun 30, 2010 |
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 5.0.4 | Jan 5, 2012 | Jun 30, 2010 |
| Centos_linux | — | Upgrade seamonkey-chatUpgrade libpng10Upgrade libpng10-develUpgrade seamonkey-nss-develUpgrade seamonkey-nsprUpgrade seamonkey-dom-inspectorUpgrade libpng-develUpgrade seamonkey-nspr-develUpgrade libpngUpgrade seamonkey-js-debuggerUpgrade seamonkey-mailUpgrade xulrunnerUpgrade seamonkeyUpgrade seamonkey-nssUpgrade xulrunner-develUpgrade thunderbirdUpgrade seamonkey-develUpgrade firefox | Dec 1, 2016 | Jun 30, 2010 |
| Debian | — | Upgrade tuxonice-userui | Jul 30, 2024 | Jun 30, 2010 |
| Freebsd | — | Upgrade linux-firefoxUpgrade pngUpgrade thunderbirdUpgrade linux-firefox-develUpgrade firefoxUpgrade seamonkey | Dec 10, 2025 | Jul 21, 2010 |
| Gentoo Linux | — | Upgrade sys-devel/m4.Upgrade media-tv/dvbstreamer.Upgrade www-client/firefox-bin.Upgrade app-text/gv.Upgrade sys-apps/pmount.Upgrade media-gfx/splashutils.Upgrade kde-base/kdm.Upgrade app-misc/beanstalkd.Upgrade mail-client/thunderbird-bin.Upgrade app-text/dvipng.Upgrade sys-apps/acl.Upgrade kde-base/kget.Upgrade net-libs/xulrunner-bin.Upgrade sys-block/partimage.Upgrade app-arch/gzip.Upgrade mail-client/thunderbird.Upgrade www-client/mozilla-firefox-bin.Upgrade app-antivirus/bitdefender-console.Upgrade x11-libs/gtk+.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade dev-util/insight.Upgrade x11-misc/slim.Upgrade www-client/uzbl.Upgrade mail-client/mozilla-thunderbird.Upgrade media-libs/libpng.Upgrade app-emulation/emul-linux-x86-baselibs.Upgrade www-client/firefox.Upgrade dev-libs/nss.Upgrade net-mail/mlmmj.Upgrade dev-perl/perl-tk.Upgrade net-libs/xulrunner.Upgrade dev-util/sourcenav.Upgrade net-ftp/lftp.Upgrade x11-apps/xinit.Upgrade www-client/seamonkey.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox.Upgrade app-arch/ncompress.Upgrade dev-lang/tk.Upgrade www-client/seamonkey-bin.Upgrade dev-libs/liblzw.Upgrade sys-auth/pam_krb5.Upgrade net-misc/iputils. | Oct 30, 2017 | Jun 30, 2010 |
| Mfsa2010 41 | — | Upgrade to Mozilla Firefox version 3.5.11Upgrade to Mozilla Firefox version 3.6.7 | Jun 14, 2012 | Jun 30, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.6 | Feb 3, 2012 | Jun 30, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.6Upgrade to Mozilla Thunderbird version 3.1.1 | Feb 22, 2012 | Jun 30, 2010 |
| Oracle_linux | — | Upgrade xulrunnerUpgrade libpngUpgrade libpng-develUpgrade xulrunner-develUpgrade firefox | Oct 16, 2024 | Jun 30, 2010 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade orbit2Upgrade MozillaThunderbird-translations-otherUpgrade mozilla-xulrunner190-translationsUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner190-32bitUpgrade libpng16-16-32bitUpgrade libpng16-compat-devel-x86-64-v3Upgrade libidlUpgrade libfreshclam3Upgrade libpng12-0-x86Upgrade mozilla-xulrunner191Upgrade mozilla-nss-toolsUpgrade mozilla-nss-x86Upgrade libfreebl3-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-nss-32bitUpgrade gconf2Upgrade MozillaFirefoxUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner191-32bitUpgrade libpng12-0-32bitUpgrade libpng12-compat-develUpgrade libpng15-15Upgrade orbit2-32bitUpgrade MozillaThunderbird-translations-commonUpgrade libpng12-develUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner192-32bitUpgrade gconf2-32bitUpgrade mozilla-xulrunner192-develUpgrade libpng16-devel-x86-64-v3Upgrade mozilla-xulrunner190-x86Upgrade libfreebl3Upgrade mozilla-xulrunner192Upgrade MozillaFirefox-translationsUpgrade libclamav12Upgrade MozillaFirefox-translations-commonUpgrade libfreshclam2Upgrade mozilla-xulrunner192-translations-32bitUpgrade libpng16-toolsUpgrade mozilla-xulrunner191-x86Upgrade mozilla-xulrunner192-gnomeUpgrade gconf2-x86Upgrade libpng16-develUpgrade MozillaFirefox-develUpgrade MozillaFirefox-branding-SLEDUpgrade libpng16-16Upgrade mozilla-xulrunner192-x86Upgrade mozilla-nsprUpgrade libclammspack0Upgrade libidl-x86Upgrade clamavUpgrade mozilla-nspr-32bitUpgrade clamav-develUpgrade MozillaThunderbirdUpgrade libpng12-0Upgrade libpng16-compat-develUpgrade libfreebl3-x86Upgrade mozilla-nssUpgrade libpng-devel-32bitUpgrade libclamav9Upgrade clamav-milterUpgrade libpng16-16-x86-64-v3Upgrade libfreshclam4Upgrade orbit2-x86Upgrade clamav-docs-htmlUpgrade libpng-develUpgrade mozilla-nspr-x86Upgrade libidl-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xulrunner-1.9.2Upgrade thunderbirdUpgrade firefox-3.0Upgrade abrowserUpgrade libpng12-0Upgrade firefox-3.5Upgrade firefox | Nov 8, 2024 | Jun 30, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub