NVD

Id
45020  
Name
CVE-2012-3425  
Description
The png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48, 1.4.x before 1.4.10, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large avail_in field value in a PNG image.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-08-13  
Modified Date
2016-08-26  
Seq
2012-3425  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225673 45020 CVE-2012-3425 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668082  View
225674 45020 CVE-2012-3425 http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=blob;f=CHANGES;h=284de253b1561b976291ba7405acd71ae71ff597;hb=refs/heads/libpng10  View
225675 45020 CVE-2012-3425 http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=blob;f=CHANGES;h=2da5a7a8b690e257f94353b5b49d493cdc385322;hb=refs/heads/libpng14  View
225676 45020 CVE-2012-3425 http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=blob;f=CHANGES;h=73e2ffd6a1471f2144d0ce7165d7323cb109f10f;hb=refs/heads/libpng15  View
225677 45020 CVE-2012-3425 http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=blob;f=CHANGES;hb=a4b640865ae47986bbe71ecc0e7d5181dcb0bac8  View
225678 45020 CVE-2012-3425 openSUSE-SU-2012:0934  View
225679 45020 CVE-2012-3425 [oss-security] 20120724 CVE Request: libpng: Out-of heap-based buffer read by inflating certain PNG images  View
225680 45020 CVE-2012-3425 [oss-security] 20120724 Re: CVE Request: libpng: Out-of heap-based buffer read by inflating certain PNG images  View
225681 45020 CVE-2012-3425 USN-2815-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27873 JVNDB-2012-003580 libpng の pngpread.c におけるサービス運用妨害 (out-of-bounds read) の脆弱性 libpng の pngpread.c 内の png_push_read_zTXt 関数には、サービス運用妨害 (out-of-bounds read) 状態となる脆弱性が存在します。 CVE-2012-3425 56663 CVE-2012-3425 45020 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003580.html 2012-08-13 2012-09-14 View