Vulnetix
Try Vulnetix Request Demo
CVE-2016-10087 PUBLISHED

The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference vectors involving loading a text chunk into a png structure, removing the text, and then adding another text chunk to the structure.

EPSS 0.93% · 75.9th percentile

Risk Scores

EPSS Score
0.93%
75.9th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibpng0, 1.2.51-0ubuntu3, 1.2.54-1
Ubuntu:14.04:LTSlibpng1.2.50-1ubuntu2, 1.2.50-1ubuntu2.14.04.1, 1.2.50-1ubuntu2.14.04.2
Ubuntu:Pro:16.04:LTSlibpng1.60, 1.6.20-2, 1.6.20-2ubuntu0.1~esm1

Timeline

References

Open in Interactive Console →