[USN-960-1] libpng vulnerabilities

Severity Critical

CVEs 2

libpng vulnerabilities

It was discovered that libpng did not properly handle certain malformed PNG
images. If a user or automated system were tricked into opening a crafted
PNG file, an attacker could cause a denial of service or possibly execute
arbitrary code with the privileges of the user invoking the program.
(CVE-2010-1205)

It was discovered that libpng did not properly handle certain malformed PNG
images. If a user or automated system were tricked into processing a
crafted PNG image, an attacker could possibly use this flaw to consume all
available resources, resulting in a denial of service. (CVE-2010-2249)

ID

USN-960-1

Severity

critical

Severity from

CVE-2010-1205

URL

https://ubuntu.com/security/notices/USN-960-1

Published