CVE-2010-2249

Name of the Vulnerable Software and Affected Versions libpng versions prior to 1.4.3 libpng versions 1.4.x prior to 1.4.3 libpng versions prior to 1.2.44

Description The issue is related to multiple vulnerabilities in the libpng package, which can be exploited remotely, leading to a denial of service and potential disruption of protected information. Specifically, a memory leak in pngrutil.c in libpng allows remote attackers to cause a denial of service via a PNG image containing malformed Physical Scale chunks.

Recommendations For libpng versions prior to 1.4.3, update to version 1.4.3 or later to resolve the issue. For libpng versions 1.4.x prior to 1.4.3, update to version 1.4.3 or later to resolve the issue. For libpng versions prior to 1.2.44, update to version 1.2.44 or later to resolve the issue.