NVD

Id
28632  
Name
CVE-2015-8472  
Description
Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8126.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-01-21  
Modified Date
2016-12-07  
Seq
2015-8472  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
150606 28632 CVE-2015-8472 APPLE-SA-2016-03-21-5  View
150607 28632 CVE-2015-8472 FEDORA-2015-c80ec85542  View
150608 28632 CVE-2015-8472 FEDORA-2015-233750b6ab  View
150609 28632 CVE-2015-8472 FEDORA-2015-4ad4998d00  View
150610 28632 CVE-2015-8472 SUSE-SU-2016:0256  View
150611 28632 CVE-2015-8472 openSUSE-SU-2016:0263  View
150612 28632 CVE-2015-8472 SUSE-SU-2016:0265  View
150613 28632 CVE-2015-8472 openSUSE-SU-2016:0268  View
150614 28632 CVE-2015-8472 SUSE-SU-2016:0269  View
150615 28632 CVE-2015-8472 openSUSE-SU-2016:0270  View
150616 28632 CVE-2015-8472 openSUSE-SU-2016:0272  View
150617 28632 CVE-2015-8472 openSUSE-SU-2016:0279  View
150618 28632 CVE-2015-8472 RHSA-2015:2594  View
150619 28632 CVE-2015-8472 RHSA-2015:2595  View
150620 28632 CVE-2015-8472 RHSA-2015:2596  View
150621 28632 CVE-2015-8472 RHSA-2016:0055  View
150622 28632 CVE-2015-8472 RHSA-2016:0056  View
150623 28632 CVE-2015-8472 RHSA-2016:0057  View
150624 28632 CVE-2015-8472 http://sourceforge.net/projects/libpng/files/libpng10/1.0.65/  View
150625 28632 CVE-2015-8472 http://sourceforge.net/projects/libpng/files/libpng12/1.2.55/  View
150626 28632 CVE-2015-8472 http://sourceforge.net/projects/libpng/files/libpng14/1.4.18/  View
150627 28632 CVE-2015-8472 http://sourceforge.net/projects/libpng/files/libpng15/1.5.25/  View
150628 28632 CVE-2015-8472 http://sourceforge.net/projects/libpng/files/libpng16/1.6.20/  View
150629 28632 CVE-2015-8472 [oss-security] 20151203 Status of CVE-2015-8126: libpng buffer overflow in png_set_PLTE  View
150630 28632 CVE-2015-8472 http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html  View
150631 28632 CVE-2015-8472 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
150632 28632 CVE-2015-8472 78624  View
150633 28632 CVE-2015-8472 RHSA-2016:1430  View
150634 28632 CVE-2015-8472 https://kc.mcafee.com/corporate/index?page=content&id=SB10148  View
150635 28632 CVE-2015-8472 https://support.apple.com/HT206167  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11526 JVNDB-2015-006846 libpng の png_set_PLTE 関数におけるバッファオーバーフローの脆弱性 libpng の png_set_PLTE 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2015-8472 85697 CVE-2015-8472 28632 7.5 7.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006846.html 2015-12-03 2016-05-31 View