CVE-2015-0973
HIGH severity · CVSS 8.8 · Memory corruption
8.8CVSS HIGH
Summary
Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via IDAT data with a large width, a different vulnerability than CVE-2014-9495.
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionRequired
Confidentiality impactHigh
Integrity impactHigh
Availability impactHigh
Exploit probability (EPSS)4%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products we track (1)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.htmlAdvisory
- http://secunia.com/advisories/62725Advisory
- http://sourceforge.net/p/png-mng/mailman/message/33173461/Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.htmlAdvisory
- https://security.netapp.com/advisory/ntap-20240719-0005/
- http://tfpwn.com/files/libpng_heap_overflow_1.6.15.txtExploit
- http://www.openwall.com/lists/oss-security/2015/01/10/1Advisory
- http://www.openwall.com/lists/oss-security/2015/01/10/3Exploit