CVE-2010-2249 (debian_linux, fedora, iphone_os, itunes, libpng, linux_enterprise_server, opensuse, player, safari, tvos, ubuntu_linux, workstation)

Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks.

View Full Alert

Leave a Reply