| Package | Affected versions | Patched versions |
|---|---|---|
| itunes | < 10.2 | 10.2 |
| safari | < 5.0.4 | 5.0.4 |
| chrome | < 5.0.375.99 | 5.0.375.99 |
| libpng | ≥ 1.4.0, < 1.4.3< 1.2.44 | 1.4.31.2.44 |
| firefox | ≥ 3.5.12, < 3.6.7< 3.5.11 | 3.6.73.5.11 |
| seamonkey | < 2.0.6 | 2.0.6 |
| thunderbird | ≥ 3.0.7, < 3.1.1< 3.0.6 | 3.1.13.0.6 |
| player | ≥ 2.5, < 2.5.5≥ 3.1, < 3.1.2 | 2.5.53.1.2 |
| workstation | ≥ 6.5.0, < 6.5.5≥ 7.1, < 7.1.2 | 6.5.57.1.2 |
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free