Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Jun 25, 2026 | Jan 5, 2024 |
| Apple Osx Imageio | — | Apply OS X security update 2010-007Upgrade macOS to the latest version | Dec 16, 2011 | Jun 30, 2010 |
| Apple Osx Php | — | Apply OS X security update 2010-005 | Dec 16, 2011 | Jun 30, 2010 |
| Apple Osx X11 | — | Upgrade macOS to the latest versionApply OS X security update 2010-007 | Dec 16, 2011 | Jun 30, 2010 |
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 5.0.4 | Jan 5, 2012 | Jun 30, 2010 |
| Centos_linux | — | Upgrade libpng10Upgrade libpng10-develUpgrade seamonkey-dom-inspectorUpgrade seamonkey-nss-develUpgrade seamonkey-nsprUpgrade seamonkey-chatUpgrade seamonkey-mailUpgrade seamonkey-develUpgrade seamonkey-nssUpgrade thunderbirdUpgrade xulrunner-develUpgrade xulrunnerUpgrade seamonkeyUpgrade seamonkey-js-debuggerUpgrade libpng-develUpgrade firefoxUpgrade libpngUpgrade seamonkey-nspr-devel | Dec 1, 2016 | Jun 30, 2010 |
| Debian | — | Upgrade tuxonice-userui | Jul 30, 2024 | Jun 30, 2010 |
| Freebsd | — | Upgrade linux-firefoxUpgrade pngUpgrade seamonkeyUpgrade linux-firefox-develUpgrade firefoxUpgrade thunderbird | Dec 10, 2025 | Jul 21, 2010 |
| Gentoo Linux | — | Upgrade net-mail/mlmmj.Upgrade app-emulation/emul-linux-x86-baselibs.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade dev-perl/perl-tk.Upgrade dev-util/insight.Upgrade x11-apps/xinit.Upgrade net-libs/xulrunner.Upgrade www-client/icecat.Upgrade x11-misc/slim.Upgrade dev-util/sourcenav.Upgrade dev-libs/liblzw.Upgrade net-ftp/lftp.Upgrade www-client/firefox.Upgrade sys-auth/pam_krb5.Upgrade media-libs/libpng.Upgrade www-client/seamonkey.Upgrade dev-lang/tk.Upgrade app-arch/ncompress.Upgrade mail-client/mozilla-thunderbird.Upgrade net-misc/iputils.Upgrade www-client/uzbl.Upgrade www-client/seamonkey-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade kde-base/kget.Upgrade sys-devel/m4.Upgrade mail-client/thunderbird-bin.Upgrade sys-apps/pmount.Upgrade app-arch/gzip.Upgrade sys-block/partimage.Upgrade mail-client/thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade app-text/gv.Upgrade media-gfx/splashutils.Upgrade media-tv/dvbstreamer.Upgrade kde-base/kdm.Upgrade app-antivirus/bitdefender-console.Upgrade sys-apps/acl.Upgrade app-text/dvipng.Upgrade x11-libs/gtk+.Upgrade app-misc/beanstalkd. | Oct 30, 2017 | Jun 30, 2010 |
| Mfsa2010 41 | — | Upgrade to Mozilla Firefox version 3.6.7Upgrade to Mozilla Firefox version 3.5.11 | Jun 14, 2012 | Jun 30, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.6 | Feb 3, 2012 | Jun 30, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.1.1Upgrade to Mozilla Thunderbird version 3.0.6 | Feb 22, 2012 | Jun 30, 2010 |
| Oracle_linux | — | Upgrade libpngUpgrade libpng-develUpgrade xulrunnerUpgrade firefoxUpgrade xulrunner-devel | Oct 16, 2024 | Jun 30, 2010 |
| Suse | — | Upgrade mozilla-xulrunner192-gnome-32bitUpgrade mozilla-xulrunner192-32bitUpgrade libpng12-0-32bitUpgrade libfreebl3-32bitUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner192-translationsUpgrade libidlUpgrade libfreshclam3Upgrade gconf2Upgrade mozilla-xulrunner191Upgrade MozillaFirefoxUpgrade mozilla-nss-toolsUpgrade mozilla-xulrunner190-32bitUpgrade MozillaThunderbird-develUpgrade libpng15-15Upgrade MozillaFirefox-translations-otherUpgrade libpng12-0-x86Upgrade libpng16-compat-devel-x86-64-v3Upgrade MozillaThunderbird-translations-otherUpgrade mozilla-nss-x86Upgrade libpng16-16-32bitUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner191-32bitUpgrade libpng12-develUpgrade orbit2Upgrade mozilla-xulrunner190-translationsUpgrade mozilla-nss-32bitUpgrade libpng12-compat-develUpgrade orbit2-32bitUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozilla-xulrunner192-x86Upgrade libpng16-16-x86-64-v3Upgrade mozilla-xulrunner192Upgrade libpng16-develUpgrade gconf2-x86Upgrade MozillaFirefox-branding-SLEDUpgrade clamav-develUpgrade MozillaFirefox-develUpgrade libpng16-compat-develUpgrade libpng-devel-32bitUpgrade MozillaThunderbirdUpgrade libpng16-16Upgrade libclamav9Upgrade libidl-32bitUpgrade clamav-milterUpgrade gconf2-32bitUpgrade MozillaFirefox-translations-commonUpgrade libfreshclam4Upgrade libfreebl3Upgrade libpng-develUpgrade libfreshclam2Upgrade mozilla-nspr-x86Upgrade orbit2-x86Upgrade libpng12-0Upgrade libfreebl3-x86Upgrade mozilla-nsprUpgrade mozilla-nssUpgrade libidl-x86Upgrade libpng16-toolsUpgrade libclammspack0Upgrade clamavUpgrade mozilla-xulrunner192-develUpgrade clamav-docs-htmlUpgrade mozilla-xulrunner191-x86Upgrade mozilla-nspr-32bitUpgrade libclamav12Upgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner192-translations-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-xulrunner192-gnomeUpgrade libpng16-devel-x86-64-v3 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libpng12-0Upgrade thunderbirdUpgrade firefoxUpgrade abrowserUpgrade firefox-3.0Upgrade firefox-3.5Upgrade xulrunner-1.9.2 | Nov 8, 2024 | Jun 30, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub