CVE:CVE-2010-1205
CNNVD:CNNVD-201006-473
libpng是一个可对PNG图形文件实现创建、读写等操作的PNG参考库。
libpng 库在处理图形行数据时存在缓冲区错误漏洞，如果图形文件中提供了比头中报告的高度多出一个额外的图形行的话，就可以触发这个溢出，导致执行任意代码；此外在处理某些sCAL块时可能出现内存泄露，特制的PNG图形可能导致拒绝服务。
solution:Upgrade libpng libpng to a higher version than 1.2.44,1.4.3,and avoid the version (,1.2.44),[1.4.0,1.4.3); Upgrade google chrome to a higher version than 5.0.375.99,and avoid the version (,5.0.375.99); Upgrade apple itunes to a higher version than 10.2,and avoid the version (,10.2); Upgrade apple safari to a higher version than 5.0.4,and avoid the version (,5.0.4); Upgrade apple iphone_os to a higher version than 4.1,and avoid the version [2.0,4.1]; Upgrade apple mac_os_x to a higher version than 10.6.4,and avoid the version [10.6.0,10.6.4); Upgrade apple mac_os_x_server to a higher version than 10.6.4,and avoid the version [10.6.0,10.6.4); Upgrade fedoraproject fedora to a higher version than 12,13,and avoid the version 12,13; Upgrade opensuse opensuse to a higher version than 11.1,11.2,and avoid the version 11.1,11.2; Upgrade suse linux_enterprise_server to a higher version than 9,10:sp3,11,11:sp1,and avoid the version 9,10:sp3,11,11:sp1; Upgrade vmware player to a higher version than 2.5.5,3.1.2,and avoid the version [2.5,2.5.5),[3.1,3.1.2); Upgrade vmware workstation to a higher version than 6.5.5,7.1.2,and avoid the version [6.5.0,6.5.5),[7.1,7.1.2); Upgrade canonical ubuntu_linux to a higher version than 6.06,8.04,9.04,9.10,10.04,and avoid the version 6.06,8.04,9.04,9.10,10.04; Upgrade debian debian_linux to a higher version than 5.0,and avoid the version 5.0; Upgrade mozilla firefox to a higher version than 3.5.11,3.6.7,and avoid the version (,3.5.11),[3.5.12,3.6.7); Upgrade mozilla seamonkey to a higher version than 2.0.6,and avoid the version (,2.0.6); Upgrade mozilla thunderbird to a higher version than 3.0.6,3.1.1,and avoid the version (,3.0.6),[3.0.7,3.1.1)