NVD

Id
36186  
Name
CVE-2014-9495  
Description
Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might allow context-dependent attackers to execute arbitrary code via a "very wide interlaced" PNG image.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-01-10  
Modified Date
2016-10-17  
Seq
2014-9495  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
184900 36186 CVE-2014-9495 APPLE-SA-2016-03-21-5  View
184901 36186 CVE-2014-9495 [png-mng-implement] 20141221 Re: libpng-1.5.21rc02 and 1.6.16rc02 are available  View
184902 36186 CVE-2014-9495 [png-mng-announce] 20141222 libpng-1.5.21 and 1.6.16 are available  View
184903 36186 CVE-2014-9495 [oss-security] 20150103 Re: CVE Request: libpng 1.6.15 Heap Overflow  View
184904 36186 CVE-2014-9495 [oss-security] 20150109 Re: CVE Request: libpng 1.6.15 Heap Overflow  View
184905 36186 CVE-2014-9495 [oss-security] 20150110 Re: CVE Request: libpng 1.6.15 Heap Overflow  View
184906 36186 CVE-2014-9495 http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html  View
184907 36186 CVE-2014-9495 71820  View
184908 36186 CVE-2014-9495 1031444  View
184909 36186 CVE-2014-9495 https://support.apple.com/HT206167  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18701 JVNDB-2014-007576 libpng の png_combine_row 関数におけるヒープベースのバッファオーバーフローの脆弱性 libpng の png_combine_row 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-9495 76788 CVE-2014-9495 36186 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007576.html 2014-12-22 2016-03-29 View