NVD

Id
49304  
Name
CVE-2009-2042  
Description
libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote attackers to read portions of sensitive memory via "out-of-bounds pixels" in the file.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-06-12  
Modified Date
2010-05-12  
Seq
2009-2042  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
249620 49304 CVE-2009-2042 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues  View
249621 49304 CVE-2009-2042 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues  View
249622 49304 CVE-2009-2042 APPLE-SA-2010-03-29-1  View
249623 49304 CVE-2009-2042 [security-announce] 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues  View
249624 49304 CVE-2009-2042 GLSA-200906-01  View
249625 49304 CVE-2009-2042 SSA:2009-170-01  View
249626 49304 CVE-2009-2042 http://support.apple.com/kb/HT4077  View
249627 49304 CVE-2009-2042 USN-913-1  View
249628 49304 CVE-2009-2042 DSA-2032  View
249629 49304 CVE-2009-2042 http://www.libpng.org/pub/png/libpng.html  View
249630 49304 CVE-2009-2042 MDVSA-2010:063  View
249631 49304 CVE-2009-2042 35233  View
249632 49304 CVE-2009-2042 http://www.vmware.com/security/advisories/VMSA-2010-0007.html  View
249633 49304 CVE-2009-2042 ADV-2009-1510  View
249634 49304 CVE-2009-2042 ADV-2010-0637  View
249635 49304 CVE-2009-2042 ADV-2010-0682  View
249636 49304 CVE-2009-2042 ADV-2010-0847  View
249637 49304 CVE-2009-2042 libpng-interlaced-image-info-disclosure(50966)  View
249638 49304 CVE-2009-2042 FEDORA-2009-5977  View
249639 49304 CVE-2009-2042 FEDORA-2009-6400  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41250 JVNDB-2009-002257 libpng における初期化されていないメモリ内の情報の一部を読まれる脆弱性 libpng には、8 で除算できない width 値を持つ 1-bit インターレース画像を適切に解析しないため、初期化されていないメモリ内の情報の一部を読まれる脆弱性が存在します。 CVE-2009-2042 39473 CVE-2009-2042 49304 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002257.html 2009-06-12 2012-04-18 View