NVD

Id
11780  
Name
CVE-2010-0205  
Description
The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of service (memory and CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate compression method on data composed of many occurrences of the same character, related to a "decompression bomb" attack.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2010-03-03  
Modified Date
2010-11-18  
Seq
2010-0205  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
64859 11780 CVE-2010-0205 http://libpng.sourceforge.net/ADVISORY-1.4.1.html  View
64860 11780 CVE-2010-0205 http://libpng.sourceforge.net/decompression_bombs.html  View
64861 11780 CVE-2010-0205 APPLE-SA-2010-11-10-1  View
64862 11780 CVE-2010-0205 FEDORA-2010-2988  View
64863 11780 CVE-2010-0205 FEDORA-2010-3375  View
64864 11780 CVE-2010-0205 FEDORA-2010-3414  View
64865 11780 CVE-2010-0205 FEDORA-2010-4683  View
64866 11780 CVE-2010-0205 SUSE-SR:2010:011  View
64867 11780 CVE-2010-0205 SUSE-SR:2010:012  View
64868 11780 CVE-2010-0205 SUSE-SR:2010:013  View
64869 11780 CVE-2010-0205 [security-announce] 20100923 VMSA-2010-0014 VMware Workstation, Player, and ACE address several security issues  View
64870 11780 CVE-2010-0205 http://support.apple.com/kb/HT4435  View
64871 11780 CVE-2010-0205 USN-913-1  View
64872 11780 CVE-2010-0205 DSA-2032  View
64873 11780 CVE-2010-0205 VU#576029  View
64874 11780 CVE-2010-0205 MDVSA-2010:063  View
64875 11780 CVE-2010-0205 MDVSA-2010:064  View
64876 11780 CVE-2010-0205 38478  View
64877 11780 CVE-2010-0205 1023674  View
64878 11780 CVE-2010-0205 http://www.vmware.com/security/advisories/VMSA-2010-0014.html  View
64879 11780 CVE-2010-0205 ADV-2010-0517  View
64880 11780 CVE-2010-0205 ADV-2010-0605  View
64881 11780 CVE-2010-0205 ADV-2010-0626  View
64882 11780 CVE-2010-0205 ADV-2010-0637  View
64883 11780 CVE-2010-0205 ADV-2010-0667  View
64884 11780 CVE-2010-0205 ADV-2010-0682  View
64885 11780 CVE-2010-0205 ADV-2010-0686  View
64886 11780 CVE-2010-0205 ADV-2010-0847  View
64887 11780 CVE-2010-0205 ADV-2010-1107  View
64888 11780 CVE-2010-0205 ADV-2010-2491  View
64889 11780 CVE-2010-0205 libpng-pngdecompresschunk-dos(56661)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35378 JVNDB-2010-001158 libpng における圧縮された補助チャンクの処理に脆弱性 libpng には、特定の PNG（Portable Network Graphics）ファイルの処理に問題があります。 CVE-2010-0205 42785 CVE-2010-0205 11780 7.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001158.html 2010-03-04 2012-03-27 View