CVE-2010-1205: Apple iPhone OS

Critical severity, CVSS 9.8. EPSS: 43.4% chance of exploitation in the next 30 days.

Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.

Affected products

• Apple iPhone OS: from 2.0, up to and including 4.1
• Apple iTunes: before 10.2 (fixed in 10.2)
• Apple Mac OS X: from 10.6.0, before 10.6.4 (fixed in 10.6.4)
• Apple Mac OS X Server: from 10.6.0, before 10.6.4 (fixed in 10.6.4)
• Apple Safari: before 5.0.4 (fixed in 5.0.4)
• Canonical Ubuntu Linux: version 6.06 only; version 8.04 only; version 9.04 only; version 9.10 only; version 10.04 only
• Debian Debian Linux: version 5.0 only
• Fedoraproject Fedora: version 12 only; version 13 only
• Google Chrome: before 5.0.375.99 (fixed in 5.0.375.99)
• Libpng Libpng: before 1.2.44 (fixed in 1.2.44); from 1.4.0, before 1.4.3 (fixed in 1.4.3)
• Mozilla Firefox: before 3.5.11 (fixed in 3.5.11); from 3.5.12, before 3.6.7 (fixed in 3.6.7)
• Mozilla Seamonkey: before 2.0.6 (fixed in 2.0.6)
• Mozilla Thunderbird: before 3.0.6 (fixed in 3.0.6); from 3.0.7, before 3.1.1 (fixed in 3.1.1)
• Opensuse Opensuse: version 11.1 only; version 11.2 only
• Suse Linux Enterprise Server: version 9 only; version 10 only; version 11 only
• VMware Player: from 2.5, before 2.5.5 (fixed in 2.5.5); from 3.1, before 3.1.2 (fixed in 3.1.2)
• VMware Workstation: from 6.5.0, before 6.5.5 (fixed in 6.5.5); from 7.1, before 7.1.2 (fixed in 7.1.2)

Published 2010-06-30. Last modified 2026-06-16.