Fix libpng vulnerability (RHBZ#504782).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200906-01 (libpng: Information disclosure)

    Jeff Phillips discovered that libpng does not properly parse 1-bit     interlaced images with width values that are not divisible by 8, which     causes libpng to include uninitialized bits in certain rows of a PNG     file.
  Impact :

    A remote attacker might entice a user to open a specially crafted PNG     file, possibly resulting in the disclosure of sensitive memory     portions.
  Workaround :

    There is no known workaround at this time.

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2010-387:01 advisory.

    The libpng package contains a library of functions for creating and manipulating PNG (Portable Network     Graphics) image format files.  PNG is a bit-mapped graphics format similar to the GIF format.  PNG was     created to replace the GIF format, since GIF uses a patented data compression algorithm.
    Libpng should be installed if you need to manipulate PNG format image     Security issues fixed with this release:
    CVE-2009-2042     libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not     divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might     allow remote attackers to read portions of sensitive memory via out-of-bounds pixels in the file.
    CVE-2010-0205     The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and     1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately     large uncompressed representation, which allows remote attackers to cause a denial of service (memory and     CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate     compression method on data composed of many occurrences of the same character, related to a decompression     bomb attack.
    CVE-2010-1205     Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive     applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an     additional data row.
    CVE-2010-2249     Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to     cause a denial of service (memory consumption and application crash) via a PNG image containing malformed     Physical Scale (aka sCAL) chunks.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.3.

Mac OS X 10.6.3 contains security fixes for the following products :

  - AFP Server
  - Apache
  - CoreAudio
  - CoreMedia
  - CoreTypes
  - CUPS
  - DesktopServices
  - Disk Images
  - Directory Services
  - Dovecot
  - Event Monitor
  - FreeRADIUS
  - FTP Server
  - iChat Server
  - ImageIO
  - Image RAW
  - Libsystem
  - Mail
  - MySQL
  - OS Services
  - Password Server
  - PHP
  - Podcast Producer
  - Preferences
  - PS Normalizer
  - QuickTime
  - Ruby
  - Server Admin
  - SMB
  - Tomcat
  - Wiki Server
  - X11

A memory corruption flaw was found in the way applications, using the libpng library and its progressive reading method, decoded certain PNG images. An attacker could create a specially crafted PNG image that, when opened, could cause an application using libpng to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2010-1205)

A denial of service flaw was found in the way applications using the libpng library decoded PNG images that have certain, highly compressed ancillary chunks. An attacker could create a specially crafted PNG image that could cause an application using libpng to consume excessive amounts of memory and CPU time, and possibly crash.
(CVE-2010-0205)

A memory leak flaw was found in the way applications using the libpng library decoded PNG images that use the Physical Scale (sCAL) extension. An attacker could create a specially crafted PNG image that could cause an application using libpng to exhaust all available memory and possibly crash or exit. (CVE-2010-2249)

A sensitive information disclosure flaw was found in the way applications using the libpng library processed 1-bit interlaced PNG images. An attacker could create a specially crafted PNG image that could cause an application using libpng to disclose uninitialized memory. (CVE-2009-2042)

All running applications using libpng or libpng10 must be restarted for the update to take effect.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0534 advisory.

    [2:1.2.10-7.1.el5_5.3]
    - Back-port fixes for CVE-2009-2042, CVE-2010-0205, CVE-2010-1205,       CVE-2010-2249     Resolves: #609921

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2010-002 applied.

This security update contains fixes for the following products :

  - AppKit
  - Application Firewall
  - AFP Server
  - Apache
  - ClamAV
  - CoreTypes
  - CUPS
  - curl
  - Cyrus IMAP
  - Cyrus SASL
  - Disk Images
  - Directory Services
  - Event Monitor
  - FreeRADIUS
  - FTP Server
  - iChat Server
  - Image RAW
  - Libsystem
  - Mail
  - Mailman
  - OS Services
  - Password Server
  - perl
  - PHP
  - PS Normalizer
  - Ruby
  - Server Admin
  - SMB
  - Tomcat
  - unzip
  - vim
  - Wiki Server
  - X11
  - xar

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0534 advisory.

    The libpng packages contain a library of functions for creating and     manipulating PNG (Portable Network Graphics) image format files.

    A memory corruption flaw was found in the way applications, using the     libpng library and its progressive reading method, decoded certain PNG     images. An attacker could create a specially-crafted PNG image that, when     opened, could cause an application using libpng to crash or, potentially,     execute arbitrary code with the privileges of the user running the     application. (CVE-2010-1205)

    A denial of service flaw was found in the way applications using the libpng     library decoded PNG images that have certain, highly compressed ancillary     chunks. An attacker could create a specially-crafted PNG image that could     cause an application using libpng to consume excessive amounts of memory     and CPU time, and possibly crash. (CVE-2010-0205)

    A memory leak flaw was found in the way applications using the libpng     library decoded PNG images that use the Physical Scale (sCAL) extension. An     attacker could create a specially-crafted PNG image that could cause an     application using libpng to exhaust all available memory and possibly crash     or exit. (CVE-2010-2249)

    A sensitive information disclosure flaw was found in the way applications     using the libpng library processed 1-bit interlaced PNG images. An attacker     could create a specially-crafted PNG image that could cause an application     using libpng to disclose uninitialized memory. (CVE-2009-2042)

    Users of libpng and libpng10 should upgrade to these updated packages,     which contain backported patches to correct these issues. All running     applications using libpng or libpng10 must be restarted for the update to     take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1653 advisory.

    This advisory aggregates security fixes for the libpng SRPM in CIQ LTS 8.6. It addresses 20 CVEs:
    CVE-2026-22801, CVE-2007-2445, CVE-2007-5269, CVE-2008-1382, CVE-2008-3964, and 15 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update of libpng improves the parsing of 1-bit interlaced images.
This bug could be abused to use 'out-of-bounds pixels' to read memory.
(CVE-2009-2042)

Updated libpng and libpng10 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The libpng packages contain a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files.

A memory corruption flaw was found in the way applications, using the libpng library and its progressive reading method, decoded certain PNG images. An attacker could create a specially crafted PNG image that, when opened, could cause an application using libpng to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2010-1205)

A denial of service flaw was found in the way applications using the libpng library decoded PNG images that have certain, highly compressed ancillary chunks. An attacker could create a specially crafted PNG image that could cause an application using libpng to consume excessive amounts of memory and CPU time, and possibly crash.
(CVE-2010-0205)

A memory leak flaw was found in the way applications using the libpng library decoded PNG images that use the Physical Scale (sCAL) extension. An attacker could create a specially crafted PNG image that could cause an application using libpng to exhaust all available memory and possibly crash or exit. (CVE-2010-2249)

A sensitive information disclosure flaw was found in the way applications using the libpng library processed 1-bit interlaced PNG images. An attacker could create a specially crafted PNG image that could cause an application using libpng to disclose uninitialized memory. (CVE-2009-2042)

Users of libpng and libpng10 should upgrade to these updated packages, which contain backported patches to correct these issues. All running applications using libpng or libpng10 must be restarted for the update to take effect.

Multiple vulnerabilities has been found and corrected in libpng :

libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote attackers to read portions of sensitive memory via out-of-bounds pixels in the file (CVE-2009-2042).

The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of service (memory and CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate compression method on data composed of many occurrences of the same character, related to a decompression bomb attack (CVE-2010-0205).

Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers.

The updated packages have been patched to correct these issues.

Several vulnerabilities have been discovered in libpng, a library for reading and writing PNG files. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2009-2042     libpng does not properly parse 1-bit interlaced images     with width values that are not divisible by 8, which     causes libpng to include uninitialized bits in certain     rows of a PNG file and might allow remote attackers to     read portions of sensitive memory via 'out-of-bounds     pixels' in the file.

  - CVE-2010-0205     libpng does not properly handle compressed     ancillary-chunk data that has a disproportionately large     uncompressed representation, which allows remote     attackers to cause a denial of service (memory and CPU     consumption, and application hang) via a crafted PNG     file

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
39405	Fedora 10 : mingw32-libpng-1.2.37-1.fc10 (2009-6400)	Nessus	Fedora Local Security Checks	2009/6/16	2021/1/11	medium
39561	GLSA-200906-01 : libpng: Information disclosure	Nessus	Gentoo Local Security Checks	2009/6/28	2021/1/6	medium
284118	MiracleLinux 3 : libpng-1.2.10-7.1.3.0.1.AXS3 (AXSA:2010-387:01)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	critical
45372	Mac OS X 10.6.x < 10.6.3 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2010/3/29	2024/5/28	critical
60816	Scientific Linux Security Update : libpng on SL3.x, SL4.x, SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
68063	Oracle Linux 5 : libpng (ELSA-2010-0534)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	critical
45373	Mac OS X Multiple Vulnerabilities (Security Update 2010-002)	Nessus	MacOS X Local Security Checks	2010/3/29	2024/5/28	critical
47876	RHEL 4 / 5 : libpng (RHSA-2010:0534)	Nessus	Red Hat Local Security Checks	2010/7/28	2025/3/20	critical
369917	Rocky Linux 8.6 [CIQ] Security Update: libpng / libpng-devel Multiple Vulnerabilities (ciqsa-2026_1653)	Nessus	Rocky Linux Local Security Checks	2026/10/21	2026/10/21	critical
39397	Fedora 11 : mingw32-libpng-1.2.37-1.fc11 (2009-5977)	Nessus	Fedora Local Security Checks	2009/6/16	2021/1/11	medium
42016	openSUSE 10 Security Update : libpng (libpng-6324)	Nessus	SuSE Local Security Checks	2009/10/6	2021/1/14	medium
47741	CentOS 3 / 4 / 5 : libpng / libpng10 (CESA-2010:0534)	Nessus	CentOS Local Security Checks	2010/7/16	2021/1/4	high
45124	Mandriva Linux Security Advisory : libpng (MDVSA-2010:063)	Nessus	Mandriva Local Security Checks	2010/3/23	2021/1/6	high
45480	Debian DSA-2032-1 : libpng - several vulnerabilities	Nessus	Debian Local Security Checks	2010/4/12	2021/1/4	high

检测

插件搜索

medium

medium

critical

critical

high

critical

critical

critical

critical

medium

medium

high

high

high