National Cyber Awareness System

Vulnerability Summary for CVE-2010-0205

Overview

The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of service (memory and CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate compression method on data composed of many occurrences of the same character, related to a "decompression bomb" attack.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Vendor Statements (disclaimer)

Official Statement from Red Hat (07/14/2010)

This issue has been addressed in Red Hat Enterprise Linux 3, 4, and 5 via https://rhn.redhat.com/errata/RHSA-2010-0534.html.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#576029

Name: VU#576029

Hyperlink:http://www.kb.cert.org/vuls/id/576029

External Source: BID

Name: 38478

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/38478

External Source: XF

Name: libpng-pngdecompresschunk-dos(56661)

Hyperlink:http://xforce.iss.net/xforce/xfdb/56661

External Source: VUPEN

Name: ADV-2010-2491

Hyperlink:http://www.vupen.com/english/advisories/2010/2491

External Source: VUPEN

Name: ADV-2010-1107

Hyperlink:http://www.vupen.com/english/advisories/2010/1107

External Source: VUPEN

Name: ADV-2010-0847

Hyperlink:http://www.vupen.com/english/advisories/2010/0847

External Source: VUPEN

Name: ADV-2010-0686

Hyperlink:http://www.vupen.com/english/advisories/2010/0686

External Source: VUPEN

Name: ADV-2010-0682

Hyperlink:http://www.vupen.com/english/advisories/2010/0682

External Source: VUPEN

Name: ADV-2010-0667

Hyperlink:http://www.vupen.com/english/advisories/2010/0667

External Source: VUPEN

Name: ADV-2010-0637

Hyperlink:http://www.vupen.com/english/advisories/2010/0637

External Source: VUPEN

Name: ADV-2010-0626

Hyperlink:http://www.vupen.com/english/advisories/2010/0626

External Source: VUPEN

Name: ADV-2010-0605

Hyperlink:http://www.vupen.com/english/advisories/2010/0605

External Source: VUPEN

Name: ADV-2010-0517

Hyperlink:http://www.vupen.com/english/advisories/2010/0517

External Source: CONFIRM

Name: http://www.vmware.com/security/advisories/VMSA-2010-0014.html

Hyperlink:http://www.vmware.com/security/advisories/VMSA-2010-0014.html

External Source: SECTRACK

Name: 1023674

Hyperlink:http://www.securitytracker.com/id?1023674

External Source: MANDRIVA

Name: MDVSA-2010:064

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2010:064

External Source: MANDRIVA

Name: MDVSA-2010:063

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2010:063

External Source: DEBIAN

Name: DSA-2032

Hyperlink:http://www.debian.org/security/2010/dsa-2032

External Source: UBUNTU

Name: USN-913-1

Hyperlink:http://ubuntu.com/usn/usn-913-1

External Source: CONFIRM

Name: http://support.apple.com/kb/HT4435

Hyperlink:http://support.apple.com/kb/HT4435

External Source: SECUNIA

Name: 41574

Hyperlink:http://secunia.com/advisories/41574

External Source: SECUNIA

Name: 39251

Hyperlink:http://secunia.com/advisories/39251

External Source: SECUNIA

Name: 38774

Hyperlink:http://secunia.com/advisories/38774

External Source: OSVDB

Name: 62670

Hyperlink:http://osvdb.org/62670

External Source: MLIST

Name: [security-announce] 20100923 VMSA-2010-0014 VMware Workstation, Player, and ACE address several security issues

Hyperlink:http://lists.vmware.com/pipermail/security-announce/2010/000105.html

External Source: SUSE

Name: SUSE-SR:2010:013

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html

External Source: SUSE

Name: SUSE-SR:2010:012

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html

External Source: SUSE

Name: SUSE-SR:2010:011

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html

External Source: FEDORA

Name: FEDORA-2010-4683

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037607.html

External Source: FEDORA

Name: FEDORA-2010-3414

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037364.html

External Source: FEDORA

Name: FEDORA-2010-3375

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037355.html

External Source: FEDORA

Name: FEDORA-2010-2988

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037237.html

External Source: APPLE

Name: APPLE-SA-2010-11-10-1

Hyperlink:http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html

External Source: CONFIRM

Name: http://libpng.sourceforge.net/decompression_bombs.html

Hyperlink:http://libpng.sourceforge.net/decompression_bombs.html

External Source: CONFIRM

Name: http://libpng.sourceforge.net/ADVISORY-1.4.1.html

Type: Advisory

Hyperlink:http://libpng.sourceforge.net/ADVISORY-1.4.1.html