CVE-2009-0040
Fixed in a distro release EPSS 5%
The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.
Products: libpng, apple iphone_os, apple mac_os_x, opensuse, suse linux_enterprise, suse linux_enterprise_desktop, suse linux_enterprise_server, debian_linux, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 4.0 | libpng | 1.2.15~beta5-1+etch2 |
| Debian 5.0 | icedove | 2.0.0.22-0lenny1 |
| Debian 5.0 | libpng | 1.2.27-2+lenny2 |
| Red Hat Enterprise Linux 2.1 | libpng | 2:1.0.14-12 |
| Red Hat Enterprise Linux 2.1 | libpng-devel | 2:1.0.14-12 |
| Red Hat Enterprise Linux 2.1 | seamonkey | 0:1.0.9-0.30.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-chat | 0:1.0.9-0.30.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-devel | 0:1.0.9-0.30.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-dom-inspector | 0:1.0.9-0.30.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-js-debugger | 0:1.0.9-0.30.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-mail | 0:1.0.9-0.30.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nspr | 0:1.0.9-0.30.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nspr-devel | 0:1.0.9-0.30.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nss | 0:1.0.9-0.30.el2 |
| Red Hat Enterprise Linux 2.1 | seamonkey-nss-devel | 0:1.0.9-0.30.el2 |
| Red Hat Enterprise Linux 3 | libpng | 2:1.2.2-29 |
| Red Hat Enterprise Linux 3 | libpng-debuginfo | 2:1.2.2-29 |
| Red Hat Enterprise Linux 3 | libpng-devel | 2:1.2.2-29 |
| Red Hat Enterprise Linux 3 | libpng10 | 0:1.0.13-20 |
| Red Hat Enterprise Linux 3 | libpng10-debuginfo | 0:1.0.13-20 |
| Red Hat Enterprise Linux 3 | libpng10-devel | 0:1.0.13-20 |
| Red Hat Enterprise Linux 3 | seamonkey | 0:1.0.9-0.34.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-chat | 0:1.0.9-0.34.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-debuginfo | 0:1.0.9-0.34.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-devel | 0:1.0.9-0.34.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-dom-inspector | 0:1.0.9-0.34.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-js-debugger | 0:1.0.9-0.34.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-mail | 0:1.0.9-0.34.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nspr | 0:1.0.9-0.34.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nspr-devel | 0:1.0.9-0.34.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nss | 0:1.0.9-0.34.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nss-devel | 0:1.0.9-0.34.el3 |
| Red Hat Enterprise Linux 4 | firefox | 0:3.0.7-1.el4 |
| Red Hat Enterprise Linux 4 | firefox-debuginfo | 0:3.0.7-1.el4 |
| Red Hat Enterprise Linux 4 | libpng | 2:1.2.7-3.el4_7.2 |
| Red Hat Enterprise Linux 4 | libpng-debuginfo | 2:1.2.7-3.el4_7.2 |
| Red Hat Enterprise Linux 4 | libpng-devel | 2:1.2.7-3.el4_7.2 |
| Red Hat Enterprise Linux 4 | libpng10 | 0:1.0.16-3.el4_7.3 |
| Red Hat Enterprise Linux 4 | libpng10-debuginfo | 0:1.0.16-3.el4_7.3 |
| Red Hat Enterprise Linux 4 | libpng10-devel | 0:1.0.16-3.el4_7.3 |
| Red Hat Enterprise Linux 4 | seamonkey | 0:1.0.9-38.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-chat | 0:1.0.9-38.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-debuginfo | 0:1.0.9-38.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-devel | 0:1.0.9-38.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-dom-inspector | 0:1.0.9-38.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-js-debugger | 0:1.0.9-38.el4 |
| Red Hat Enterprise Linux 4 | seamonkey-mail | 0:1.0.9-38.el4 |
| Red Hat Enterprise Linux 5 | firefox | 0:3.0.7-1.el5 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:3.0.7-1.el5 |
| Red Hat Enterprise Linux 5 | libpng | 2:1.2.10-7.1.el5_3.2 |
| Red Hat Enterprise Linux 5 | libpng-debuginfo | 2:1.2.10-7.1.el5_3.2 |
| Red Hat Enterprise Linux 5 | libpng-devel | 2:1.2.10-7.1.el5_3.2 |
| Red Hat Enterprise Linux 5 | xulrunner | 0:1.9.0.7-1.el5 |
| Red Hat Enterprise Linux 5 | xulrunner-debuginfo | 0:1.9.0.7-1.el5 |
| Red Hat Enterprise Linux 5 | xulrunner-devel | 0:1.9.0.7-1.el5 |
| Red Hat Enterprise Linux 5 | xulrunner-devel-unstable | 0:1.9.0.7-1.el5 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |
| openSUSE Tumbleweed | libpng16 | 1.6.37-3.3 |