{
    "id": "CVE-2010-1205",
    "published": "2010-06-30 18:30:01",
    "last_modified": "2026-06-16 23:17:50",
    "cvss_score": "9.8",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-120",
    "description": "Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.",
    "epss_score": "0.43382",
    "epss_percentile": "0.98689",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-09-26 18:17:07",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "apple",
            "product": "iphone_os"
        },
        {
            "vendor": "apple",
            "product": "itunes"
        },
        {
            "vendor": "apple",
            "product": "mac_os_x"
        },
        {
            "vendor": "apple",
            "product": "mac_os_x_server"
        },
        {
            "vendor": "apple",
            "product": "safari"
        },
        {
            "vendor": "canonical",
            "product": "ubuntu_linux"
        },
        {
            "vendor": "debian",
            "product": "debian_linux"
        },
        {
            "vendor": "fedoraproject",
            "product": "fedora"
        },
        {
            "vendor": "google",
            "product": "chrome"
        },
        {
            "vendor": "libpng",
            "product": "libpng"
        },
        {
            "vendor": "mozilla",
            "product": "firefox"
        },
        {
            "vendor": "mozilla",
            "product": "seamonkey"
        },
        {
            "vendor": "mozilla",
            "product": "thunderbird"
        },
        {
            "vendor": "opensuse",
            "product": "opensuse"
        },
        {
            "vendor": "suse",
            "product": "linux_enterprise_server"
        },
        {
            "vendor": "vmware",
            "product": "player"
        },
        {
            "vendor": "vmware",
            "product": "workstation"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "14422",
            "title": "libpng 1.4.2 - Denial of Service",
            "date": "2010-07-20",
            "url": "https://www.exploit-db.com/exploits/14422"
        }
    ],
    "refs_list": [
        "http://blackberry.com/btsc/KB27244",
        "http://code.google.com/p/chromium/issues/detail?id=45983",
        "http://googlechromereleases.blogspot.com/2010/07/stable-channel-update.html",
        "http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=188eb6b42602bf7d7ae708a21897923b6a83fe7c#patch18",
        "http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html",
        "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html",
        "http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html",
        "http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html",
        "http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html",
        "http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044283.html",
        "http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044397.html",
        "http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html",
        "http://lists.vmware.com/pipermail/security-announce/2010/000105.html",
        "http://secunia.com/advisories/40302",
        "http://secunia.com/advisories/40336",
        "http://secunia.com/advisories/40472",
        "http://secunia.com/advisories/40547",
        "http://secunia.com/advisories/41574",
        "http://secunia.com/advisories/42314",
        "http://secunia.com/advisories/42317",
        "http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.613061",
        "http://support.apple.com/kb/HT4312",
        "http://support.apple.com/kb/HT4435",
        "http://support.apple.com/kb/HT4456",
        "http://support.apple.com/kb/HT4457"
    ]
}