CVE-2010-1205: apple iphone_os

Modified

AliasesDEBIAN-CVE-2010-1205

Published 30-06-2010Last modified 07-08-2024

Vulnerability summary

CVE-2010-1205 is a critical (CVSS 9.8) vulnerability in apple iphone_os. EPSS estimates a 43.38% chance of exploitation in the next 30 days, higher than 98.7% of scored vulnerabilities. 3 public exploits are recorded.

Priority

Prioritisepublic exploit

Public exploit (exploit-database, 20-07-2010)

Source freshness unavailable

How is this decided?

CVSS score

9.8/10

010

Critical · v3.1 (NVD)

EPSS score

43.38%

0%100%

High · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits3reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 11 · Related 5

DSA-2072-1 DSA-2075-1 OPENSUSE-SU-2024:10050-1 OPENSUSE-SU-2024:10071-1 OPENSUSE-SU-2024:10230-1 OPENSUSE-SU-2024:10685-1+5 more

Timeline

30-06-2010
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.

CVSS metrics

3 scores · 2 sources · 2 versions

v3.19.8v2.07.5

EPSS trend

Probability

43.38%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

No change 0.00 pp

From 43.38% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

3 found

referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown
exploit-databasedosmultipleVerified
libpng 1.4.2 - Denial of Service
Maturity: poc

Weaknesses

CWE · root cause

CWE-120Buffer Copy without Checking Size of InputThe product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Apple5 products

iphone_os≥ 2.0, ≤ 4.1
itunes< 10.2
mac_os_x≥ 10.6.0, < 10.6.4
mac_os_x_server≥ 10.6.0, < 10.6.4
safari< 5.0.4

Mozilla3 products

firefox< 3.5.11 | ≥ 3.5.12, < 3.6.7
seamonkey< 2.0.6
thunderbird< 3.0.6 | ≥ 3.0.7, < 3.1.1

Debian2 products

tuxonice-userui< 1.0-1
debian_linuxEOL5.0

Vmware2 products

player≥ 2.5, < 2.5.5 | ≥ 3.1, < 3.1.2
workstation≥ 6.5.0, < 6.5.5 | ≥ 7.1, < 7.1.2

Canonical1 product

ubuntu_linuxEOL6.06 | 8.04 | 9.04 | 9.10 | 10.04

Fedoraproject1 product

fedoraEOL12 | 13

Google1 product

chrome< 5.0.375.99

Libpng1 product

libpng< 1.2.44 | ≥ 1.4.0, < 1.4.3

Opensuse1 product

opensuseEOL11.1 | 11.2

Suse1 product

linux_enterprise_server9 | 10:sp3 | 11 | 11:sp1

10 vendors · 18 products

References

50 links

www.mandriva.com/security/advisories?name=MDVSA-2010:133Vendor AdvisoryX Refsource MANDRIVABroken Link
www.vmware.com/security/advisories/VMSA-2010-0014.htmlX Refsource CONFIRMPatchThird Party Advisory
www.securityfocus.com/bid/41174VDB EntryX Refsource BIDThird Party Advisory
www.vupen.com/english/advisories/2010/1877VDB EntryX Refsource VUPENBroken Link
googlechromereleases.blogspot.com/2010/07/stable-channel-update.htmlX Refsource CONFIRMRelease NotesThird Party Advisory
www.vupen.com/english/advisories/2010/3045VDB EntryX Refsource VUPENBroken Link
exchange.xforce.ibmcloud.com/vulnerabilities/59815VDB EntryX Refsource XFThird Party Advisory
support.apple.com/kb/HT4435X Refsource CONFIRMBroken Link
www.mozilla.org/security/announce/2010/mfsa2010-41.htmlX Refsource CONFIRMThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11851VDB EntrySignatureX Refsource OVALThird Party Advisory

Show all 50 references

www.vupen.com/english/advisories/2010/1837VDB EntryX Refsource VUPENBroken Link
bugzilla.mozilla.org/show_bug.cgi?id=570451X Refsource CONFIRMExploitIssue TrackingThird Party Advisory
support.apple.com/kb/HT4457X Refsource CONFIRMThird Party Advisory
www.vupen.com/english/advisories/2010/1755VDB EntryX Refsource VUPENBroken Link
www.vupen.com/english/advisories/2010/3046VDB EntryX Refsource VUPENBroken Link
secunia.com/advisories/40472Third Party AdvisoryX Refsource SECUNIABroken Link
support.apple.com/kb/HT4566X Refsource CONFIRMBroken Link
secunia.com/advisories/40302Third Party AdvisoryX Refsource SECUNIABroken Link
lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
secunia.com/advisories/40336Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/41574Third Party AdvisoryX Refsource SECUNIABroken Link
www.ubuntu.com/usn/USN-960-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
blackberry.com/btsc/KB27244X Refsource CONFIRMBroken Link
www.libpng.org/pub/png/libpng.htmlX Refsource CONFIRMProductVendor Advisory
lists.apple.com/archives/security-announce/2010//Aug/msg00003.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
lists.apple.com/archives/security-announce/2011/Mar/msg00000.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
secunia.com/advisories/42317Third Party AdvisoryX Refsource SECUNIABroken Link
lists.vmware.com/pipermail/security-announce/2010/000105.htmlMailing ListX Refsource MLISTPatchThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2010-July/044283.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
www.debian.org/security/2010/dsa-2072Vendor AdvisoryX Refsource DEBIANThird Party Advisory
support.apple.com/kb/HT4312X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/40547Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/42314Third Party AdvisoryX Refsource SECUNIABroken Link
www.vupen.com/english/advisories/2010/1637VDB EntryX Refsource VUPENBroken Link
support.apple.com/kb/HT4554X Refsource CONFIRMThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lists.apple.com/archives/security-announce/2011//Mar/msg00004.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.613061Vendor AdvisoryX Refsource SLACKWAREMailing ListPatchThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2010-July/044397.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
bugs.webkit.org/show_bug.cgi?id=40798X Refsource CONFIRMPermissions RequiredThird Party Advisory
support.apple.com/kb/HT4456X Refsource CONFIRMThird Party Advisory
www.vupen.com/english/advisories/2010/2491VDB EntryX Refsource VUPENBroken Link
trac.webkit.org/changeset/61816X Refsource CONFIRMPatchThird Party Advisory
libpng.git.sourceforge.net/git/…X Refsource CONFIRM
code.google.com/p/chromium/issues/detail?id=45983X Refsource CONFIRMExploitIssue TrackingMailing ListThird Party Advisory
www.vupen.com/english/advisories/2010/1846VDB EntryX Refsource VUPENBroken Link
bugzilla.redhat.com/show_bug.cgi?id=608238X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
lists.apple.com/archives/security-announce/2010//Nov/msg00003.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
www.vupen.com/english/advisories/2010/1612VDB EntryX Refsource VUPENBroken Link
security-tracker.debian.org/tracker/CVE-2010-1205Advisory