The remote host is affected by the vulnerability described in GLSA-201010-01 (Libpng: Multiple vulnerabilities)

    Multiple vulnerabilities were found in libpng:
      The png_decompress_chunk() function in pngrutil.c does not properly         handle certain type of compressed data (CVE-2010-0205)       A buffer overflow in pngread.c when using progressive applications         (CVE-2010-1205)       A memory leak in pngrutil.c when dealing with a certain type of         chunks (CVE-2010-2249)   Impact :

    An attacker could exploit these vulnerabilities to cause programs linked       against the library to crash or execute arbitrary code with the       permissions of the user running the vulnerable program, which could be       the root user.
  Workaround :

    There is no known workaround at this time.

This is the latest upstream maintenance release. In addition to a number of minor bugfixes, it mitigates the resource-consumption effects of highly compressed ancillary chunks in hostile PNG files as described at http://libpng.sourceforge.net/ADVISORY-1.4.1.html This issue has been assigned CVE-2010-0205 by CERT.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A vulnerability has been found and corrected in libpng :

The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of service (memory and CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate compression method on data composed of many occurrences of the same character, related to a decompression bomb attack (CVE-2010-0205).

The updated packages have been patched to correct this issue.

A vulnerability in libpng can result in denial of service conditions when a remote attacker tricks a victim to open a specially crafted PNG file.

The PNG project describes the problem in an advisory :

Because of the efficient compression method used in Portable Network Graphics (PNG) files, a small PNG file can expand tremendously, acting as a 'decompression bomb'.

Malformed PNG chunks can consume a large amount of CPU and wall-clock time and large amounts of memory, up to all memory available on a system

Update to libpng 1.2.43, includes fix for CVE-2010-0205

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Denial of service while decompressing a highly compressed huge ancillary chunk has been fixed in libpng. CVE-2010-0205 has been assigned.

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0534 advisory.

    The libpng packages contain a library of functions for creating and     manipulating PNG (Portable Network Graphics) image format files.

    A memory corruption flaw was found in the way applications, using the     libpng library and its progressive reading method, decoded certain PNG     images. An attacker could create a specially-crafted PNG image that, when     opened, could cause an application using libpng to crash or, potentially,     execute arbitrary code with the privileges of the user running the     application. (CVE-2010-1205)

    A denial of service flaw was found in the way applications using the libpng     library decoded PNG images that have certain, highly compressed ancillary     chunks. An attacker could create a specially-crafted PNG image that could     cause an application using libpng to consume excessive amounts of memory     and CPU time, and possibly crash. (CVE-2010-0205)

    A memory leak flaw was found in the way applications using the libpng     library decoded PNG images that use the Physical Scale (sCAL) extension. An     attacker could create a specially-crafted PNG image that could cause an     application using libpng to exhaust all available memory and possibly crash     or exit. (CVE-2010-2249)

    A sensitive information disclosure flaw was found in the way applications     using the libpng library processed 1-bit interlaced PNG images. An attacker     could create a specially-crafted PNG image that could cause an application     using libpng to disclose uninitialized memory. (CVE-2009-2042)

    Users of libpng and libpng10 should upgrade to these updated packages,     which contain backported patches to correct these issues. All running     applications using libpng or libpng10 must be restarted for the update to     take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A memory corruption flaw was found in the way applications, using the libpng library and its progressive reading method, decoded certain PNG images. An attacker could create a specially crafted PNG image that, when opened, could cause an application using libpng to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2010-1205)

A denial of service flaw was found in the way applications using the libpng library decoded PNG images that have certain, highly compressed ancillary chunks. An attacker could create a specially crafted PNG image that could cause an application using libpng to consume excessive amounts of memory and CPU time, and possibly crash.
(CVE-2010-0205)

A memory leak flaw was found in the way applications using the libpng library decoded PNG images that use the Physical Scale (sCAL) extension. An attacker could create a specially crafted PNG image that could cause an application using libpng to exhaust all available memory and possibly crash or exit. (CVE-2010-2249)

A sensitive information disclosure flaw was found in the way applications using the libpng library processed 1-bit interlaced PNG images. An attacker could create a specially crafted PNG image that could cause an application using libpng to disclose uninitialized memory. (CVE-2009-2042)

All running applications using libpng or libpng10 must be restarted for the update to take effect.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0534 advisory.

    [2:1.2.10-7.1.el5_5.3]
    - Back-port fixes for CVE-2009-2042, CVE-2010-0205, CVE-2010-1205,       CVE-2010-2249     Resolves: #609921

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Denial of service while decompressing a highly compressed huge ancillary chunk has been fixed in libpng. (CVE-2010-0205)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and     1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately     large uncompressed representation, which allows remote attackers to cause a denial of service (memory and     CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate     compression method on data composed of many occurrences of the same character, related to a decompression     bomb attack. (CVE-2010-0205)

Note that Nessus relies on the presence of the package as reported by the vendor.

It was discovered that libpng did not properly initialize memory when decoding certain 1-bit interlaced images. If a user or automated system were tricked into processing crafted PNG images, an attacker could possibly use this flaw to read sensitive information stored in memory. This issue only affected Ubuntu 6.06 LTS, 8.04 LTS, 8.10 and 9.04. (CVE-2009-2042)

It was discovered that libpng did not properly handle certain excessively compressed PNG images. If a user or automated system were tricked into processing a crafted PNG image, an attacker could possibly use this flaw to consume all available resources, resulting in a denial of service. (CVE-2010-0205).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.5.

Mac OS X 10.6.5 contains security fixes for the following products :

  - AFP Server
  - Apache mod_perl
  - Apache
  - AppKit
  - ATS
  - CFNetwork
  - CoreGraphics
  - CoreText
  - CUPS
  - Directory Services
  - diskdev_cmds
  - Disk Images
  - Flash Player plug-in
  - gzip
  - Image Capture
  - ImageIO
  - Image RAW
  - Kernel
  - MySQL
  - neon
  - Networking
  - OpenLDAP
  - OpenSSL
  - Password Server
  - PHP
  - Printing
  - python
  - QuickLook
  - QuickTime
  - Safari RSS
  - Time Machine
  - Wiki Server
  - X11
  - xar

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
49771	GLSA-201010-01 : Libpng: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2010/10/6	2021/1/6	high
47298	Fedora 13 : libpng10-1.0.53-1.fc13 (2010-2988)	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	high
45136	Mandriva Linux Security Advisory : libpng (MDVSA-2010:064)	Nessus	Mandriva Local Security Checks	2010/3/24	2021/1/6	high
45584	FreeBSD : png -- libpng decompression denial of service (4fb5d2cd-4c77-11df-83fb-0015587e2cc1)	Nessus	FreeBSD Local Security Checks	2010/4/21	2021/1/6	high
47312	Fedora 11 : libpng10-1.0.53-1.fc11 (2010-3414)	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	high
47370	Fedora 13 : libpng-1.2.43-1.fc13 (2010-4683)	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	high
46247	SuSE9 Security Update : libpng (YOU Patch Number 12599)	Nessus	SuSE Local Security Checks	2010/5/7	2021/1/14	high
47876	RHEL 4 / 5 : libpng (RHSA-2010:0534)	Nessus	Red Hat Local Security Checks	2010/7/28	2025/3/20	critical
60816	Scientific Linux Security Update : libpng on SL3.x, SL4.x, SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
68063	Oracle Linux 5 : libpng (ELSA-2010-0534)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	critical
50940	SuSE 11 Security Update : libpng (SAT Patch Number 2161)	Nessus	SuSE Local Security Checks	2010/12/2	2021/1/14	high
51621	SuSE 11.1 Security Update : libpng12-0 (SAT Patch Number 2473)	Nessus	SuSE Local Security Checks	2011/1/21	2021/1/14	high
217117	Linux Distros Unpatched Vulnerability : CVE-2010-0205	Nessus	Misc.	2025/3/3	2025/9/3	high
46353	openSUSE Security Update : libpng-devel (openSUSE-SU-2010:0257-1)	Nessus	SuSE Local Security Checks	2010/5/18	2021/1/14	high
45080	Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : libpng vulnerabilities (USN-913-1)	Nessus	Ubuntu Local Security Checks	2010/3/17	2019/9/19	high
50548	Mac OS X 10.6.x < 10.6.5 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2010/11/10	2024/5/28	critical

检测

插件搜索

high

high

high

high

high

high

high

critical

high

critical

high

high

high

high

high

critical