Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2015-0973

Опубликовано: 18 янв. 2015
Источник: ubuntu
Приоритет: medium
CVSS2: 7.5
CVSS3: 8.8

Описание

Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via IDAT data with a large width, a different vulnerability than CVE-2014-9495.

РелизСтатусПримечание
devel

not-affected

esm-infra-legacy/trusty

not-affected

lucid

not-affected

precise

not-affected

trusty

not-affected

trusty/esm

not-affected

upstream

released

1.5.21, 1.6.16
utopic

not-affected

Показывать по

РелизСтатусПримечание
devel

not-affected

2014.20140926.35254-6
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected]
lucid

ignored

end of life
precise

not-affected

trusty

not-affected

trusty/esm

DNE

trusty was not-affected
upstream

released

2014.20140926.35254-6
utopic

not-affected

Показывать по

7.5 High

CVSS2

8.8 High

CVSS3

Связанные уязвимости

redhat
около 11 лет назад

Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via IDAT data with a large width, a different vulnerability than CVE-2014-9495.

CVSS3: 8.8
nvd
около 11 лет назад

Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via IDAT data with a large width, a different vulnerability than CVE-2014-9495.

CVSS3: 8.8
debian
около 11 лет назад

Buffer overflow in the png_read_IDAT_data function in pngrutil.c in li ...

CVSS3: 8.8
github
больше 3 лет назад

Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via IDAT data with a large width, a different vulnerability than CVE-2014-9495.

fstec
около 11 лет назад

Уязвимость библиотеки libpng, позволяющая нарушителю выполнить произвольный код

7.5 High

CVSS2

8.8 High

CVSS3