CVE-2009-0040
- State
- Published
- Severity
- Not scored
- Published
- Feb 22, 2009
- Updated
- Aug 7, 2024
- Reserved
- Dec 15, 2008
Description
The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2009:0315vendor-advisory
- SUSE-SA:2009:023vendor-advisory
- http://support.apple.com/kb/HT3757
- SUSE-SA:2009:012vendor-advisory
- GLSA-200903-28vendor-advisory
- RHSA-2009:0333vendor-advisory
- http://support.apple.com/kb/HT3639
- 35386third-party-advisory
- GLSA-201209-25vendor-advisory
- DSA-1830vendor-advisory
- ADV-2009-0632vdb-entry
- ADV-2009-1621vdb-entry
- RHSA-2009:0340vendor-advisory
- 1020521vendor-advisory
- http://support.apple.com/kb/HT3549
- ADV-2009-1560vdb-entry
- oval:org.mitre.oval:def:10316vdb-entrysignature
- ADV-2009-0469vdb-entry
- 34388third-party-advisory
- ADV-2009-1462vdb-entry
- SSA:2009-083-02vendor-advisory
- APPLE-SA-2009-06-08-1vendor-advisory
- 36096third-party-advisory
- [png-mng-implement] 20090219 libpng-1.2.35 and libpng-1.0.43 fix security vulnerabilitymailing-list
- http://www.vmware.com/security/advisories/VMSA-2009-0007.html
- RHSA-2009:0325vendor-advisory
- 259989vendor-advisory
- 35302third-party-advisory
- 33976third-party-advisory
- 35074third-party-advisory
- libpng-pointer-arrays-code-execution(48819)vdb-entry
- ADV-2009-1522vdb-entry
- 34140third-party-advisory
- ADV-2009-1451vdb-entry
- APPLE-SA-2009-06-17-1vendor-advisory
- FEDORA-2009-2045vendor-advisory
- APPLE-SA-2009-05-12vendor-advisory
- SUSE-SR:2009:005vendor-advisory
- MDVSA-2009:083vendor-advisory
- 34464third-party-advisory
- 34272third-party-advisory
- 34210third-party-advisory
- APPLE-SA-2009-08-05-1vendor-advisory
- oval:org.mitre.oval:def:6458vdb-entrysignature
- 34265third-party-advisory
- http://wiki.rpath.com/Advisories:rPSA-2009-0046
- 34145third-party-advisory
- 20090529 VMSA-2009-0007 VMware Hosted products and ESX and ESXi patches resolve security issuesmailing-list
- 35379third-party-advisory
- ADV-2009-0473vdb-entry
- 20090821 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Servermailing-list
- 34143third-party-advisory
- FEDORA-2009-2882vendor-advisory
- DSA-1750vendor-advisory
- FEDORA-2009-2884vendor-advisory
- SSA:2009-083-03vendor-advisory
- 33970third-party-advisory
- 34137third-party-advisory
- TA09-133Athird-party-advisory
- [security-announce] 20090820 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Servermailing-list
- http://sourceforge.net/project/shownotes.php?group_id=1689&release_id=662441
- 34462third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2009-069.htm
- ADV-2009-1297vdb-entry
- FEDORA-2009-1976vendor-advisory
- http://downloads.sourceforge.net/libpng/libpng-1.2.34-ADVISORY.txt
- VU#649212third-party-advisory
- 34324third-party-advisory
- 20090312 rPSA-2009-0046-1 libpngmailing-list
- 34152third-party-advisory
- MDVSA-2009:075vendor-advisory
- 33990vdb-entry
- http://support.apple.com/kb/HT3613
- 35258third-party-advisory
- 33827vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm
- ADV-2009-2172vdb-entry
- TA09-218Athird-party-advisory
- MDVSA-2009:051vendor-advisory
- 34320third-party-advisory
- http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Document
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.