CVE-2009-2042

Summary

CVECVE-2009-2042
StatePUBLISHED
Assignermitre
Source PriorityCVE Program / NVD first with legacy fallback
Published2009-06-12 20:30:00 UTC
Updated2026-04-23 00:35:47 UTC
Descriptionlibpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote attackers to read portions of sensitive memory via "out-of-bounds pixels" in the file.

Risk And Classification

Primary CVSS: v2.0 4.3 from [email protected]

AV:N/AC:M/Au:N/C:P/I:N/A:N

Problem Types: CWE-200 | n/a

CVSS v2.0 Breakdown

Access Vector
Network
Access Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
None
Availability
None

AV:N/AC:M/Au:N/C:P/I:N/A:N

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Application Libpng Libpng 0.89c All All All
Application Libpng Libpng 0.95 All All All
Application Libpng Libpng 1.0.0 All All All
Application Libpng Libpng 1.0.1 All All All
Application Libpng Libpng 1.0.10 All All All
Application Libpng Libpng 1.0.10 beta1 All All
Application Libpng Libpng 1.0.10 rc1 All All
Application Libpng Libpng 1.0.11 All All All
Application Libpng Libpng 1.0.11 beta1 All All
Application Libpng Libpng 1.0.11 beta2 All All
Application Libpng Libpng 1.0.11 beta3 All All
Application Libpng Libpng 1.0.11 rc1 All All
Application Libpng Libpng 1.0.12 All All All
Application Libpng Libpng 1.0.12 beta1 All All
Application Libpng Libpng 1.0.12 rc1 All All
Application Libpng Libpng 1.0.13 All All All
Application Libpng Libpng 1.0.14 All All All
Application Libpng Libpng 1.0.15 All All All
Application Libpng Libpng 1.0.15 rc1 All All
Application Libpng Libpng 1.0.15 rc2 All All
Application Libpng Libpng 1.0.15 rc3 All All
Application Libpng Libpng 1.0.16 All All All
Application Libpng Libpng 1.0.17 All All All
Application Libpng Libpng 1.0.17 rc1 All All
Application Libpng Libpng 1.0.18 All All All
Application Libpng Libpng 1.0.19 All All All
Application Libpng Libpng 1.0.19 rc1 All All
Application Libpng Libpng 1.0.19 rc2 All All
Application Libpng Libpng 1.0.19 rc3 All All
Application Libpng Libpng 1.0.19 rc5 All All
Application Libpng Libpng 1.0.2 All All All
Application Libpng Libpng 1.0.20 All All All
Application Libpng Libpng 1.0.21 All All All
Application Libpng Libpng 1.0.21 rc1 All All
Application Libpng Libpng 1.0.21 rc2 All All
Application Libpng Libpng 1.0.22 All All All
Application Libpng Libpng 1.0.22 rc1 All All
Application Libpng Libpng 1.0.23 All All All
Application Libpng Libpng 1.0.23 rc1 All All
Application Libpng Libpng 1.0.7 beta17 All All
Application Libpng Libpng 1.0.7 beta18 All All
Application Libpng Libpng 1.0.7 rc1 All All
Application Libpng Libpng 1.0.7 rc2 All All
Application Libpng Libpng 1.0.8 All All All
Application Libpng Libpng 1.0.8 beta1 All All
Application Libpng Libpng 1.0.8 beta2 All All
Application Libpng Libpng 1.0.8 beta3 All All
Application Libpng Libpng 1.0.8 beta4 All All
Application Libpng Libpng 1.0.8 rc1 All All
Application Libpng Libpng 1.0.9 All All All
Application Libpng Libpng 1.0.9 beta1 All All
Application Libpng Libpng 1.0.9 beta10 All All
Application Libpng Libpng 1.0.9 beta2 All All
Application Libpng Libpng 1.0.9 beta3 All All
Application Libpng Libpng 1.0.9 beta4 All All
Application Libpng Libpng 1.0.9 beta5 All All
Application Libpng Libpng 1.0.9 beta6 All All
Application Libpng Libpng 1.0.9 beta7 All All
Application Libpng Libpng 1.0.9 beta8 All All
Application Libpng Libpng 1.0.9 beta9 All All
Application Libpng Libpng 1.0.9 rc1 All All
Application Libpng Libpng 1.0.9 rc2 All All
Application Libpng Libpng 1.2.0 All All All
Application Libpng Libpng 1.2.0 beta1 All All
Application Libpng Libpng 1.2.0 beta2 All All
Application Libpng Libpng 1.2.0 beta3 All All
Application Libpng Libpng 1.2.0 beta4 All All
Application Libpng Libpng 1.2.0 beta5 All All
Application Libpng Libpng 1.2.0 rc1 All All
Application Libpng Libpng 1.2.1 All All All
Application Libpng Libpng 1.2.1 beta1 All All
Application Libpng Libpng 1.2.1 beta2 All All
Application Libpng Libpng 1.2.1 beta3 All All
Application Libpng Libpng 1.2.1 beta4 All All
Application Libpng Libpng 1.2.1 rc1 All All
Application Libpng Libpng 1.2.1 rc2 All All
Application Libpng Libpng 1.2.10 All All All
Application Libpng Libpng 1.2.10 beta1 All All
Application Libpng Libpng 1.2.10 beta2 All All
Application Libpng Libpng 1.2.10 beta3 All All
Application Libpng Libpng 1.2.10 beta4 All All
Application Libpng Libpng 1.2.10 beta5 All All
Application Libpng Libpng 1.2.10 beta6 All All
Application Libpng Libpng 1.2.10 beta7 All All
Application Libpng Libpng 1.2.10 rc1 All All
Application Libpng Libpng 1.2.10 rc2 All All
Application Libpng Libpng 1.2.10 rc3 All All
Application Libpng Libpng 1.2.11 All All All
Application Libpng Libpng 1.2.11 beta1 All All
Application Libpng Libpng 1.2.11 beta2 All All
Application Libpng Libpng 1.2.11 beta3 All All
Application Libpng Libpng 1.2.11 beta4 All All
Application Libpng Libpng 1.2.11 rc1 All All
Application Libpng Libpng 1.2.11 rc2 All All
Application Libpng Libpng 1.2.11 rc3 All All
Application Libpng Libpng 1.2.11 rc5 All All
Application Libpng Libpng 1.2.13 All All All
Application Libpng Libpng 1.2.13 beta1 All All
Application Libpng Libpng 1.2.13 rc1 All All
Application Libpng Libpng 1.2.13 rc2 All All
Application Libpng Libpng 1.2.14 All All All
Application Libpng Libpng 1.2.14 beta1 All All
Application Libpng Libpng 1.2.14 beta2 All All
Application Libpng Libpng 1.2.14 rc1 All All
Application Libpng Libpng 1.2.15 All All All
Application Libpng Libpng 1.2.15 beta1 All All
Application Libpng Libpng 1.2.15 beta2 All All
Application Libpng Libpng 1.2.15 beta3 All All
Application Libpng Libpng 1.2.15 beta4 All All
Application Libpng Libpng 1.2.15 beta5 All All
Application Libpng Libpng 1.2.15 beta6 All All
Application Libpng Libpng 1.2.15 rc1 All All
Application Libpng Libpng 1.2.15 rc2 All All
Application Libpng Libpng 1.2.15 rc3 All All
Application Libpng Libpng 1.2.15 rc4 All All
Application Libpng Libpng 1.2.15 rc5 All All
Application Libpng Libpng 1.2.16 All All All
Application Libpng Libpng 1.2.16 beta1 All All
Application Libpng Libpng 1.2.16 beta2 All All
Application Libpng Libpng 1.2.16 rc1 All All
Application Libpng Libpng 1.2.17 All All All
Application Libpng Libpng 1.2.17 beta1 All All
Application Libpng Libpng 1.2.17 beta2 All All
Application Libpng Libpng 1.2.17 rc1 All All
Application Libpng Libpng 1.2.17 rc2 All All
Application Libpng Libpng 1.2.17 rc3 All All
Application Libpng Libpng 1.2.17 rc4 All All
Application Libpng Libpng 1.2.18 All All All
Application Libpng Libpng 1.2.19 All All All
Application Libpng Libpng 1.2.19 beta1 All All
Application Libpng Libpng 1.2.19 beta10 All All
Application Libpng Libpng 1.2.19 beta11 All All
Application Libpng Libpng 1.2.19 beta12 All All
Application Libpng Libpng 1.2.19 beta13 All All
Application Libpng Libpng 1.2.19 beta14 All All
Application Libpng Libpng 1.2.19 beta15 All All
Application Libpng Libpng 1.2.19 beta16 All All
Application Libpng Libpng 1.2.19 beta17 All All
Application Libpng Libpng 1.2.19 beta18 All All
Application Libpng Libpng 1.2.19 beta19 All All
Application Libpng Libpng 1.2.19 beta2 All All
Application Libpng Libpng 1.2.19 beta20 All All
Application Libpng Libpng 1.2.19 beta21 All All
Application Libpng Libpng 1.2.19 beta22 All All
Application Libpng Libpng 1.2.19 beta23 All All
Application Libpng Libpng 1.2.19 beta24 All All
Application Libpng Libpng 1.2.19 beta25 All All
Application Libpng Libpng 1.2.19 beta26 All All
Application Libpng Libpng 1.2.19 beta27 All All
Application Libpng Libpng 1.2.19 beta28 All All
Application Libpng Libpng 1.2.19 beta29 All All
Application Libpng Libpng 1.2.19 beta3 All All
Application Libpng Libpng 1.2.19 beta30 All All
Application Libpng Libpng 1.2.19 beta31 All All
Application Libpng Libpng 1.2.19 beta32 All All
Application Libpng Libpng 1.2.19 beta33 All All
Application Libpng Libpng 1.2.19 beta4 All All
Application Libpng Libpng 1.2.19 beta5 All All
Application Libpng Libpng 1.2.19 beta6 All All
Application Libpng Libpng 1.2.19 beta7 All All
Application Libpng Libpng 1.2.19 beta8 All All
Application Libpng Libpng 1.2.19 beta9 All All
Application Libpng Libpng 1.2.19 rc1 All All
Application Libpng Libpng 1.2.19 rc2 All All
Application Libpng Libpng 1.2.19 rc3 All All
Application Libpng Libpng 1.2.19 rc4 All All
Application Libpng Libpng 1.2.19 rc5 All All
Application Libpng Libpng 1.2.19 rc6 All All
Application Libpng Libpng 1.2.2 All All All
Application Libpng Libpng 1.2.2 beta1 All All
Application Libpng Libpng 1.2.2 beta2 All All
Application Libpng Libpng 1.2.2 beta3 All All
Application Libpng Libpng 1.2.2 beta4 All All
Application Libpng Libpng 1.2.2 beta5 All All
Application Libpng Libpng 1.2.2 beta6 All All
Application Libpng Libpng 1.2.2 rc1 All All
Application Libpng Libpng 1.2.20 All All All
Application Libpng Libpng 1.2.20 beta01 All All
Application Libpng Libpng 1.2.20 beta02 All All
Application Libpng Libpng 1.2.20 beta03 All All
Application Libpng Libpng 1.2.20 beta04 All All
Application Libpng Libpng 1.2.20 rc1 All All
Application Libpng Libpng 1.2.20 rc2 All All
Application Libpng Libpng 1.2.20 rc3 All All
Application Libpng Libpng 1.2.20 rc4 All All
Application Libpng Libpng 1.2.20 rc5 All All
Application Libpng Libpng 1.2.20 rc6 All All
Application Libpng Libpng 1.2.21 All All All
Application Libpng Libpng 1.2.21 beta1 All All
Application Libpng Libpng 1.2.21 beta2 All All
Application Libpng Libpng 1.2.21 rc1 All All
Application Libpng Libpng 1.2.21 rc2 All All
Application Libpng Libpng 1.2.21 rc3 All All
Application Libpng Libpng 1.2.22 All All All
Application Libpng Libpng 1.2.22 beta1 All All
Application Libpng Libpng 1.2.22 beta2 All All
Application Libpng Libpng 1.2.22 beta2-1.2.21 All All
Application Libpng Libpng 1.2.22 beta3 All All
Application Libpng Libpng 1.2.22 beta3-1.2.21 All All
Application Libpng Libpng 1.2.22 beta4 All All
Application Libpng Libpng 1.2.22 beta4-1.2.21 All All
Application Libpng Libpng 1.2.22 rc1 All All
Application Libpng Libpng 1.2.22 rc1-1.2.21 All All
Application Libpng Libpng 1.2.23 All All All
Application Libpng Libpng 1.2.23 beta01 All All
Application Libpng Libpng 1.2.23 beta01-1.2.22 All All
Application Libpng Libpng 1.2.23 beta02 All All
Application Libpng Libpng 1.2.23 beta02-1.2.22 All All
Application Libpng Libpng 1.2.23 beta03 All All
Application Libpng Libpng 1.2.23 beta03-1.2.22 All All
Application Libpng Libpng 1.2.23 beta04 All All
Application Libpng Libpng 1.2.23 beta04-1.2.22 All All
Application Libpng Libpng 1.2.23 beta05 All All
Application Libpng Libpng 1.2.23 beta05-1.2.22 All All
Application Libpng Libpng 1.2.23 rc01 All All
Application Libpng Libpng 1.2.23 rc01-1.2.22 All All
Application Libpng Libpng 1.2.24 All All All
Application Libpng Libpng 1.2.24 beta01 All All
Application Libpng Libpng 1.2.24 beta01-1.2.23 All All
Application Libpng Libpng 1.2.24 beta02 All All
Application Libpng Libpng 1.2.24 beta02-1.2.23 All All
Application Libpng Libpng 1.2.24 beta03 All All
Application Libpng Libpng 1.2.24 beta03-1.2.23 All All
Application Libpng Libpng 1.2.24 rc01 All All
Application Libpng Libpng 1.2.24 rc01-1.2.23 All All
Application Libpng Libpng 1.2.25 All All All
Application Libpng Libpng 1.2.25 beta01 All All
Application Libpng Libpng 1.2.25 beta02 All All
Application Libpng Libpng 1.2.25 beta03 All All
Application Libpng Libpng 1.2.25 beta04 All All
Application Libpng Libpng 1.2.25 beta05 All All
Application Libpng Libpng 1.2.25 beta06 All All
Application Libpng Libpng 1.2.25 rc01 All All
Application Libpng Libpng 1.2.25 rc02 All All
Application Libpng Libpng 1.2.26 All All All
Application Libpng Libpng 1.2.26 beta01 All All
Application Libpng Libpng 1.2.26 beta02 All All
Application Libpng Libpng 1.2.26 beta03 All All
Application Libpng Libpng 1.2.26 beta04 All All
Application Libpng Libpng 1.2.26 beta05 All All
Application Libpng Libpng 1.2.26 rc01 All All
Application Libpng Libpng 1.2.3 All All All
Application Libpng Libpng 1.2.3 rc3 All All
Application Libpng Libpng 1.2.3 rc6 All All
Application Libpng Libpng 1.2.30 All All All
Application Libpng Libpng 1.2.31 All All All
Application Libpng Libpng 1.2.33 All All All
Application Libpng Libpng 1.2.34 All All All
Application Libpng Libpng All All All All

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Na N/a affected n/a Not specified

References

ReferenceSourceLinkTags
Fedora update for mingw32-libpng - Secunia.com af854a3a-2127-422b-91ae-364da2661108 secunia.com
NEOHAPSIS - Peace of Mind Through Integrity and Insight af854a3a-2127-422b-91ae-364da2661108 archives.neohapsis.com
Webmail - OVH af854a3a-2127-422b-91ae-364da2661108 www.vupen.com Patch, Vendor Advisory
USN-913-1: libpng vulnerabilities | Ubuntu af854a3a-2127-422b-91ae-364da2661108 ubuntu.com
Webmail : Solution de messagerie professionnelle - OVHcloud- OVH af854a3a-2127-422b-91ae-364da2661108 www.vupen.com
Gentoo Linux Documentation -- libpng: Information disclosure af854a3a-2127-422b-91ae-364da2661108 security.gentoo.org
libpng Interlaced Images Information Disclosure Vulnerability - Secunia Advisories - Vulnerability Information - Secunia.com af854a3a-2127-422b-91ae-364da2661108 secunia.com Vendor Advisory
Debian update for libpng - Secunia.com af854a3a-2127-422b-91ae-364da2661108 secunia.com
The Slackware Linux Project: Slackware Security Advisories af854a3a-2127-422b-91ae-364da2661108 slackware.com
[SECURITY] Fedora 11 Update: mingw32-libpng-1.2.37-1.fc11 af854a3a-2127-422b-91ae-364da2661108 www.redhat.com
Debian -- Security Information -- DSA-2032-1 libpng af854a3a-2127-422b-91ae-364da2661108 www.debian.org
VMware Server Multiple Vulnerabilities - Advisories - Community af854a3a-2127-422b-91ae-364da2661108 secunia.com
Slackware update for libpng - Secunia Advisories - Vulnerability Information - Secunia.com af854a3a-2127-422b-91ae-364da2661108 secunia.com
VMSA-2010-0007.1 af854a3a-2127-422b-91ae-364da2661108 www.vmware.com
[Security-announce] VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues af854a3a-2127-422b-91ae-364da2661108 lists.vmware.com
[SECURITY] Fedora 10 Update: mingw32-libpng-1.2.37-1.fc10 af854a3a-2127-422b-91ae-364da2661108 www.redhat.com
APPLE-SA-2010-03-29-1 Security Update 2010-002 / Mac OS X v10.6.3 af854a3a-2127-422b-91ae-364da2661108 lists.apple.com
Webmail : Solution de messagerie professionnelle - OVHcloud- OVH af854a3a-2127-422b-91ae-364da2661108 www.vupen.com
About the security content of Security Update 2010-002 / Mac OS X v10.6.3 af854a3a-2127-422b-91ae-364da2661108 support.apple.com
VMware Products Multiple Vulnerabilities - Advisories - Community af854a3a-2127-422b-91ae-364da2661108 secunia.com
Gentoo update for libpng - Secunia.com af854a3a-2127-422b-91ae-364da2661108 secunia.com
Support / Security / Advisories / / MDVSA-2010:063 | Mandriva af854a3a-2127-422b-91ae-364da2661108 www.mandriva.com
Webmail : Solution de messagerie professionnelle - OVHcloud- OVH af854a3a-2127-422b-91ae-364da2661108 www.vupen.com
NEOHAPSIS - Peace of Mind Through Integrity and Insight af854a3a-2127-422b-91ae-364da2661108 archives.neohapsis.com
Libpng 1-bit Interlaced Images Information Disclosure Vulnerability af854a3a-2127-422b-91ae-364da2661108 www.securityfocus.com Patch
IBM X-Force Exchange af854a3a-2127-422b-91ae-364da2661108 exchange.xforce.ibmcloud.com
libpng Home Page af854a3a-2127-422b-91ae-364da2661108 www.libpng.org Patch, Vendor Advisory
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Vendor Comments And Credit

OrganizationPublishedContributorStatement
Red Hat2010-07-14Mark J CoxThis issue has been addressed in Red Hat Enterprise Linux 3, 4, and 5 via https://rhn.redhat.com/errata/RHSA-2010-0534.html.

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report