National Cyber Awareness System

Vulnerability Summary for CVE-2009-0040

Overview

The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA09-218A

Name: TA09-218A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA09-218A.html

US-CERT Technical Alert: TA09-133A

Name: TA09-133A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA09-133A.html

US-CERT Vulnerability Note: VU#649212

Name: VU#649212

Hyperlink:http://www.kb.cert.org/vuls/id/649212

External Source: FEDORA

Name: FEDORA-2009-2884

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html

External Source: FEDORA

Name: FEDORA-2009-2882

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html

External Source: FEDORA

Name: FEDORA-2009-1976

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00412.html

External Source: FEDORA

Name: FEDORA-2009-2045

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00272.html

External Source: XF

Name: libpng-pointer-arrays-code-execution(48819)

Hyperlink:http://xforce.iss.net/xforce/xfdb/48819

External Source: VUPEN

Name: ADV-2009-2172

Hyperlink:http://www.vupen.com/english/advisories/2009/2172

External Source: VUPEN

Name: ADV-2009-1621

Hyperlink:http://www.vupen.com/english/advisories/2009/1621

External Source: VUPEN

Name: ADV-2009-1560

Hyperlink:http://www.vupen.com/english/advisories/2009/1560

External Source: VUPEN

Name: ADV-2009-1522

Hyperlink:http://www.vupen.com/english/advisories/2009/1522

External Source: VUPEN

Name: ADV-2009-1462

Hyperlink:http://www.vupen.com/english/advisories/2009/1462

External Source: VUPEN

Name: ADV-2009-1451

Hyperlink:http://www.vupen.com/english/advisories/2009/1451

External Source: VUPEN

Name: ADV-2009-1297

Hyperlink:http://www.vupen.com/english/advisories/2009/1297

External Source: VUPEN

Name: ADV-2009-0632

Hyperlink:http://www.vupen.com/english/advisories/2009/0632

External Source: VUPEN

Name: ADV-2009-0473

Hyperlink:http://www.vupen.com/english/advisories/2009/0473

External Source: VUPEN

Name: ADV-2009-0469

Hyperlink:http://www.vupen.com/english/advisories/2009/0469

External Source: CONFIRM

Name: http://www.vmware.com/security/advisories/VMSA-2009-0007.html

Hyperlink:http://www.vmware.com/security/advisories/VMSA-2009-0007.html

External Source: BID

Name: 33990

Hyperlink:http://www.securityfocus.com/bid/33990

External Source: BID

Name: 33827

Hyperlink:http://www.securityfocus.com/bid/33827

External Source: BUGTRAQ

Name: 20090821 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/505990/100/0/threaded

External Source: BUGTRAQ

Name: 20090529 VMSA-2009-0007 VMware Hosted products and ESX and ESXi patches resolve security issues

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/503912/100/0/threaded

External Source: BUGTRAQ

Name: 20090312 rPSA-2009-0046-1 libpng

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/501767/100/0/threaded

External Source: REDHAT

Name: RHSA-2009:0340

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-0340.html

External Source: REDHAT

Name: RHSA-2009:0333

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-0333.html

External Source: REDHAT

Name: RHSA-2009:0325

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-0325.html

External Source: REDHAT

Name: RHSA-2009:0315

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-0315.html

External Source: MANDRIVA

Name: MDVSA-2009:083

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2009:083

External Source: MANDRIVA

Name: MDVSA-2009:075

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2009:075

External Source: MANDRIVA

Name: MDVSA-2009:051

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2009:051

External Source: DEBIAN

Name: DSA-1830

Hyperlink:http://www.debian.org/security/2009/dsa-1830

External Source: DEBIAN

Name: DSA-1750

Hyperlink:http://www.debian.org/security/2009/dsa-1750

External Source: CONFIRM

Name: http://wiki.rpath.com/Advisories:rPSA-2009-0046

Hyperlink:http://wiki.rpath.com/Advisories:rPSA-2009-0046

External Source: CONFIRM

Name: http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document

Hyperlink:http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm

External Source: CONFIRM

Name: http://support.apple.com/kb/HT3757

Hyperlink:http://support.apple.com/kb/HT3757

External Source: CONFIRM

Name: http://support.apple.com/kb/HT3639

Hyperlink:http://support.apple.com/kb/HT3639

External Source: CONFIRM

Name: http://support.apple.com/kb/HT3613

Hyperlink:http://support.apple.com/kb/HT3613

External Source: CONFIRM

Name: http://support.apple.com/kb/HT3549

Hyperlink:http://support.apple.com/kb/HT3549

External Source: SUNALERT

Name: 1020521

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1

External Source: SUNALERT

Name: 259989

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1

External Source: CONFIRM

Name: http://sourceforge.net/project/shownotes.php?group_id=1689&release_id=662441

Hyperlink:http://sourceforge.net/project/shownotes.php?group_id=1689&release_id=662441

External Source: MLIST

Name: [png-mng-implement] 20090219 libpng-1.2.35 and libpng-1.0.43 fix security vulnerability

Hyperlink:http://sourceforge.net/mailarchive/message.php?msg_name=e56ccc8f0902181726i200f4bf0n20d919473ec409b7%40mail.gmail.com

External Source: SLACKWARE

Name: SSA:2009-083-03

Hyperlink:http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952

External Source: SLACKWARE

Name: SSA:2009-083-02

Hyperlink:http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420

External Source: GENTOO

Name: GLSA-201209-25

Hyperlink:http://security.gentoo.org/glsa/glsa-201209-25.xml

External Source: GENTOO

Name: GLSA-200903-28

Hyperlink:http://security.gentoo.org/glsa/glsa-200903-28.xml

External Source: SECUNIA

Name: 36096

Hyperlink:http://secunia.com/advisories/36096

External Source: SECUNIA

Name: 35386

Hyperlink:http://secunia.com/advisories/35386

External Source: SECUNIA

Name: 35379

Hyperlink:http://secunia.com/advisories/35379

External Source: SECUNIA

Name: 35302

Hyperlink:http://secunia.com/advisories/35302

External Source: SECUNIA

Name: 35258

Hyperlink:http://secunia.com/advisories/35258

External Source: SECUNIA

Name: 35074

Hyperlink:http://secunia.com/advisories/35074

External Source: SECUNIA

Name: 34464

Hyperlink:http://secunia.com/advisories/34464

External Source: SECUNIA

Name: 34462

Hyperlink:http://secunia.com/advisories/34462

External Source: SECUNIA

Name: 34388

Hyperlink:http://secunia.com/advisories/34388

External Source: SECUNIA

Name: 34324

Hyperlink:http://secunia.com/advisories/34324

External Source: SECUNIA

Name: 34320

Hyperlink:http://secunia.com/advisories/34320

External Source: SECUNIA

Name: 34272

Hyperlink:http://secunia.com/advisories/34272

External Source: SECUNIA

Name: 34265

Hyperlink:http://secunia.com/advisories/34265

External Source: SECUNIA

Name: 34210

Hyperlink:http://secunia.com/advisories/34210

External Source: SECUNIA

Name: 34152

Hyperlink:http://secunia.com/advisories/34152

External Source: SECUNIA

Name: 34145

Hyperlink:http://secunia.com/advisories/34145

External Source: SECUNIA

Name: 34143

Hyperlink:http://secunia.com/advisories/34143

External Source: SECUNIA

Name: 34140

Hyperlink:http://secunia.com/advisories/34140

External Source: SECUNIA

Name: 34137

Hyperlink:http://secunia.com/advisories/34137

External Source: SECUNIA

Name: 33976

Type: Advisory

Hyperlink:http://secunia.com/advisories/33976

External Source: SECUNIA

Name: 33970

Type: Advisory

Hyperlink:http://secunia.com/advisories/33970

External Source: OVAL

Name: oval:org.mitre.oval:def:6458

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6458

External Source: OVAL

Name: oval:org.mitre.oval:def:10316

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10316

External Source: MLIST

Name: [security-announce] 20090820 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server

Hyperlink:http://lists.vmware.com/pipermail/security-announce/2009/000062.html

External Source: SUSE

Name: SUSE-SA:2009:023

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html

External Source: SUSE

Name: SUSE-SA:2009:012

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html

External Source: SUSE

Name: SUSE-SR:2009:005

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html

External Source: APPLE

Name: APPLE-SA-2009-05-12

Hyperlink:http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

External Source: APPLE

Name: APPLE-SA-2009-06-17-1

Hyperlink:http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html

External Source: APPLE

Name: APPLE-SA-2009-06-08-1

Hyperlink:http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html

External Source: APPLE

Name: APPLE-SA-2009-08-05-1

Hyperlink:http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html

External Source: CONFIRM

Name: http://downloads.sourceforge.net/libpng/libpng-1.2.34-ADVISORY.txt

Hyperlink:http://downloads.sourceforge.net/libpng/libpng-1.2.34-ADVISORY.txt

External Source: CONFIRM

Name: ftp://ftp.simplesystems.org/pub/png/src/libpng-1.2.34-ADVISORY.txt

Type: Advisory

Hyperlink:ftp://ftp.simplesystems.org/pub/png/src/libpng-1.2.34-ADVISORY.txt

References to Check Content

Identifier:oval:org.mitre.oval:def:6458

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:6458

Identifier:oval:org.mitre.oval:def:10316

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10316