NVD

Id
28343  
Name
CVE-2015-7981  
Description
The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data in an image file, which triggers an out-of-bounds read.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-11-24  
Modified Date
2016-12-07  
Seq
2015-7981  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
148952 28343 CVE-2015-7981 FEDORA-2015-1d87313b7c  View
148953 28343 CVE-2015-7981 FEDORA-2015-ec2ddd15d7  View
148954 28343 CVE-2015-7981 FEDORA-2015-501493d853  View
148955 28343 CVE-2015-7981 openSUSE-SU-2015:2099  View
148956 28343 CVE-2015-7981 openSUSE-SU-2015:2136  View
148957 28343 CVE-2015-7981 RHSA-2015:2594  View
148958 28343 CVE-2015-7981 RHSA-2015:2595  View
148959 28343 CVE-2015-7981 http://sourceforge.net/p/libpng/bugs/241/  View
148960 28343 CVE-2015-7981 http://sourceforge.net/projects/libpng/files/libpng10/1.0.64/  View
148961 28343 CVE-2015-7981 http://sourceforge.net/projects/libpng/files/libpng12/1.2.54/  View
148962 28343 CVE-2015-7981 http://sourceforge.net/projects/libpng/files/libpng14/1.4.17/  View
148963 28343 CVE-2015-7981 DSA-3399  View
148964 28343 CVE-2015-7981 [oss-security] 20151026 CVE Requests for read out of bound in libpng  View
148965 28343 CVE-2015-7981 [oss-security] 20151026 Re: CVE Requests for read out of bound in libpng  View
148966 28343 CVE-2015-7981 http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html  View
148967 28343 CVE-2015-7981 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
148968 28343 CVE-2015-7981 77304  View
148969 28343 CVE-2015-7981 1034393  View
148970 28343 CVE-2015-7981 USN-2815-1  View
148971 28343 CVE-2015-7981 RHSA-2016:1430  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10694 JVNDB-2015-006014 libpng の png.c の png_convert_to_rfc1123 関数における重要なプロセスメモリ情報を取得される脆弱性 libpng の png.c の png_convert_to_rfc1123 関数には、重要なプロセスメモリ情報を取得される脆弱性が存在します。 CVE-2015-7981 85206 CVE-2015-7981 28343 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006014.html 2015-11-12 2016-05-31 View