CVE:CVE-2010-2249
CNNVD:CNNVD-201006-491
libpng是一个可对PNG图形文件实现创建、读写等操作的PNG参考库。
libpng 1.2.44之前版本和1.4.3之前的1.4.x版本存在资源管理错误漏洞，该漏洞源于远程攻击者可以通过一个包含畸形物理缩比模块的PNG图像来导致拒绝服务。
solution:Upgrade libpng libpng to a higher version than 1.2.44,1.4.3,and avoid the version (,1.2.44),[1.4.0,1.4.3); Upgrade apple itunes to a higher version than 10.2,and avoid the version (,10.2); Upgrade apple safari to a higher version than 5.0.4,and avoid the version (,5.0.4); Upgrade apple iphone_os to a higher version than 4.1,and avoid the version [2.0,4.1]; Upgrade apple tvos to a higher version than 4.1.0,and avoid the version (,4.1.0); Upgrade fedoraproject fedora to a higher version than 12,13,and avoid the version 12,13; Upgrade opensuse opensuse to a higher version than 11.1,11.2,and avoid the version 11.1,11.2; Upgrade suse linux_enterprise_server to a higher version than 9,10:sp3,11,11:sp1,and avoid the version 9,10:sp3,11,11:sp1; Upgrade vmware player to a higher version than 2.5.5,3.1.2,and avoid the version [2.5,2.5.5),[3.1,3.1.2); Upgrade vmware workstation to a higher version than 6.5.5,7.1.2,and avoid the version [6.5.0,6.5.5),[7.1,7.1.2); Upgrade canonical ubuntu_linux to a higher version than 6.06,8.04,9.04,9.10,10.04,and avoid the version 6.06,8.04,9.04,9.10,10.04; Upgrade debian debian_linux to a higher version than 5.0,and avoid the version 5.0