NVD

Id
28666  
Name
CVE-2015-8540  
Description
Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-04-14  
Modified Date
2016-11-28  
Seq
2015-8540  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
150748 28666 CVE-2015-8540 FEDORA-2015-3868cfa17b  View
150749 28666 CVE-2015-8540 http://sourceforge.net/p/libpng/bugs/244/  View
150750 28666 CVE-2015-8540 http://sourceforge.net/p/libpng/code/ci/d9006f683c641793252d92254a75ae9b815b42ed/  View
150751 28666 CVE-2015-8540 http://sourceforge.net/projects/libpng/files/libpng10/1.0.66/  View
150752 28666 CVE-2015-8540 http://sourceforge.net/projects/libpng/files/libpng12/1.2.56/  View
150753 28666 CVE-2015-8540 http://sourceforge.net/projects/libpng/files/libpng14/1.4.19/  View
150754 28666 CVE-2015-8540 http://sourceforge.net/projects/libpng/files/libpng15/1.5.26/  View
150755 28666 CVE-2015-8540 [oss-security] 20151210 CVE request - read underflow in libpng 1.2.55, 1.0.65, 1.4.18, and 1.5.25 (pngwutil.c)  View
150756 28666 CVE-2015-8540 [oss-security] 20151210 Re: CVE request - read underflow in libpng 1.2.55, 1.0.65, 1.4.18, and 1.5.25 (pngwutil.c)  View
150757 28666 CVE-2015-8540 [oss-security] 20151211 Re: CVE request - read underflow in libpng 1.2.55, 1.0.65, 1.4.18, and 1.5.25 (pngwutil.c)  View
150758 28666 CVE-2015-8540 [oss-security] 20151211 Re: Re: CVE request - read underflow in libpng 1.2.55, 1.0.65, 1.4.18, and 1.5.25 (pngwutil.c)  View
150759 28666 CVE-2015-8540 [oss-security] 20151217 Re: CVE request - read underflow in libpng 1.2.55, 1.0.65, 1.4.18, and 1.5.25 (pngwutil.c)  View
150760 28666 CVE-2015-8540 http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html  View
150761 28666 CVE-2015-8540 80592  View
150762 28666 CVE-2015-8540 RHSA-2016:1430  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11764 JVNDB-2015-007084 libpng の pngwutil.c の png_check_keyword 関数における整数アンダーフローの脆弱性 libpng の pngwutil.c の png_check_keyword 関数には、整数アンダーフローの脆弱性が存在します。 CVE-2015-8540 85765 CVE-2015-8540 28666 9.3 8.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007084.html 2015-12-17 2016-04-21 View