QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2009-2042

Back to search

CVE-2009-2042

Published: Jun 12, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote attackers to read portions of sensitive memory via "out-of-bounds pixels" in the file.

VendorProductVersions

n/a

n/a

affected
n/a

References

SSA:2009-170-01
vendor-advisory
x_refsource_SLACKWARE
ADV-2010-0682
vdb-entry
x_refsource_VUPEN
39206
third-party-advisory
x_refsource_SECUNIA
MDVSA-2010:063
vendor-advisory
x_refsource_MANDRIVA
39251
third-party-advisory
x_refsource_SECUNIA
35346
third-party-advisory
x_refsource_SECUNIA
APPLE-SA-2010-03-29-1
vendor-advisory
x_refsource_APPLE
USN-913-1
vendor-advisory
x_refsource_UBUNTU
DSA-2032
vendor-advisory
x_refsource_DEBIAN
35524
third-party-advisory
x_refsource_SECUNIA
35233
vdb-entry
x_refsource_BID
ADV-2010-0637
vdb-entry
x_refsource_VUPEN
ADV-2009-1510
vdb-entry
x_refsource_VUPEN
35594
third-party-advisory
x_refsource_SECUNIA
39215
third-party-advisory
x_refsource_SECUNIA
35470
third-party-advisory
x_refsource_SECUNIA
GLSA-200906-01
vendor-advisory
x_refsource_GENTOO
FEDORA-2009-5977
vendor-advisory
x_refsource_FEDORA
FEDORA-2009-6400
vendor-advisory
x_refsource_FEDORA
ADV-2010-0847
vdb-entry
x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now