CVE-2016-10087
Summary
| CVE | CVE-2016-10087 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-01-30 22:59:00 UTC |
| Updated | 2025-04-20 01:37:25 UTC |
| Description | The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference vectors involving loading a text chunk into a png structure, removing the text, and then adding another text chunk to the structure. |
Risk And Classification
Primary CVSS: v3.0 7.5 HIGH from [email protected]
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Problem Types: CWE-476 | n/a
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.0 | [email protected] | Primary | 7.5 | HIGH | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| 2.0 | [email protected] | Primary | 5 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
CVSS v3.0 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
NoneIntegrity
NoneAvailability
HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
NoneIntegrity
NoneAvailability
PartialAV:N/AC:L/Au:N/C:N/I:N/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Libpng | Libpng | 0.71 | All | All | All |
| Application | Libpng | Libpng | 0.8 | All | All | All |
| Application | Libpng | Libpng | 0.81 | All | All | All |
| Application | Libpng | Libpng | 0.82 | All | All | All |
| Application | Libpng | Libpng | 0.85 | All | All | All |
| Application | Libpng | Libpng | 0.86 | All | All | All |
| Application | Libpng | Libpng | 0.87 | All | All | All |
| Application | Libpng | Libpng | 0.88 | All | All | All |
| Application | Libpng | Libpng | 0.89 | All | All | All |
| Application | Libpng | Libpng | 0.89c | All | All | All |
| Application | Libpng | Libpng | 0.90 | All | All | All |
| Application | Libpng | Libpng | 0.95 | All | All | All |
| Application | Libpng | Libpng | 0.96 | All | All | All |
| Application | Libpng | Libpng | 0.97 | All | All | All |
| Application | Libpng | Libpng | 0.98 | All | All | All |
| Application | Libpng | Libpng | 0.99 | All | All | All |
| Application | Libpng | Libpng | 0.99a | All | All | All |
| Application | Libpng | Libpng | 0.99b | All | All | All |
| Application | Libpng | Libpng | 0.99c | All | All | All |
| Application | Libpng | Libpng | 0.99d | All | All | All |
| Application | Libpng | Libpng | 0.99e | All | All | All |
| Application | Libpng | Libpng | 0.99f | All | All | All |
| Application | Libpng | Libpng | 0.99g | All | All | All |
| Application | Libpng | Libpng | 0.99h | All | All | All |
| Application | Libpng | Libpng | 1.0.0 | All | All | All |
| Application | Libpng | Libpng | 1.0.0a | All | All | All |
| Application | Libpng | Libpng | 1.0.0b | All | All | All |
| Application | Libpng | Libpng | 1.0.1 | All | All | All |
| Application | Libpng | Libpng | 1.0.10 | All | All | All |
| Application | Libpng | Libpng | 1.0.11 | All | All | All |
| Application | Libpng | Libpng | 1.0.12 | All | All | All |
| Application | Libpng | Libpng | 1.0.13 | All | All | All |
| Application | Libpng | Libpng | 1.0.14 | All | All | All |
| Application | Libpng | Libpng | 1.0.15 | All | All | All |
| Application | Libpng | Libpng | 1.0.16 | All | All | All |
| Application | Libpng | Libpng | 1.0.17 | All | All | All |
| Application | Libpng | Libpng | 1.0.18 | All | All | All |
| Application | Libpng | Libpng | 1.0.19 | All | All | All |
| Application | Libpng | Libpng | 1.0.1a | All | All | All |
| Application | Libpng | Libpng | 1.0.1b | All | All | All |
| Application | Libpng | Libpng | 1.0.1c | All | All | All |
| Application | Libpng | Libpng | 1.0.1d | All | All | All |
| Application | Libpng | Libpng | 1.0.1e | All | All | All |
| Application | Libpng | Libpng | 1.0.2 | All | All | All |
| Application | Libpng | Libpng | 1.0.20 | All | All | All |
| Application | Libpng | Libpng | 1.0.21 | All | All | All |
| Application | Libpng | Libpng | 1.0.22 | All | All | All |
| Application | Libpng | Libpng | 1.0.23 | All | All | All |
| Application | Libpng | Libpng | 1.0.24 | All | All | All |
| Application | Libpng | Libpng | 1.0.25 | All | All | All |
| Application | Libpng | Libpng | 1.0.26 | All | All | All |
| Application | Libpng | Libpng | 1.0.27 | All | All | All |
| Application | Libpng | Libpng | 1.0.28 | All | All | All |
| Application | Libpng | Libpng | 1.0.29 | All | All | All |
| Application | Libpng | Libpng | 1.0.2a | All | All | All |
| Application | Libpng | Libpng | 1.0.3 | All | All | All |
| Application | Libpng | Libpng | 1.0.30 | All | All | All |
| Application | Libpng | Libpng | 1.0.31 | All | All | All |
| Application | Libpng | Libpng | 1.0.32 | All | All | All |
| Application | Libpng | Libpng | 1.0.33 | All | All | All |
| Application | Libpng | Libpng | 1.0.34 | All | All | All |
| Application | Libpng | Libpng | 1.0.35 | All | All | All |
| Application | Libpng | Libpng | 1.0.37 | All | All | All |
| Application | Libpng | Libpng | 1.0.38 | All | All | All |
| Application | Libpng | Libpng | 1.0.39 | All | All | All |
| Application | Libpng | Libpng | 1.0.3a | All | All | All |
| Application | Libpng | Libpng | 1.0.3b | All | All | All |
| Application | Libpng | Libpng | 1.0.3d | All | All | All |
| Application | Libpng | Libpng | 1.0.4 | All | All | All |
| Application | Libpng | Libpng | 1.0.40 | All | All | All |
| Application | Libpng | Libpng | 1.0.41 | All | All | All |
| Application | Libpng | Libpng | 1.0.42 | All | All | All |
| Application | Libpng | Libpng | 1.0.43 | All | All | All |
| Application | Libpng | Libpng | 1.0.44 | All | All | All |
| Application | Libpng | Libpng | 1.0.45 | All | All | All |
| Application | Libpng | Libpng | 1.0.46 | All | All | All |
| Application | Libpng | Libpng | 1.0.47 | All | All | All |
| Application | Libpng | Libpng | 1.0.48 | All | All | All |
| Application | Libpng | Libpng | 1.0.4a | All | All | All |
| Application | Libpng | Libpng | 1.0.4b | All | All | All |
| Application | Libpng | Libpng | 1.0.4c | All | All | All |
| Application | Libpng | Libpng | 1.0.4d | All | All | All |
| Application | Libpng | Libpng | 1.0.4e | All | All | All |
| Application | Libpng | Libpng | 1.0.4f | All | All | All |
| Application | Libpng | Libpng | 1.0.5 | All | All | All |
| Application | Libpng | Libpng | 1.0.50 | All | All | All |
| Application | Libpng | Libpng | 1.0.51 | All | All | All |
| Application | Libpng | Libpng | 1.0.52 | All | All | All |
| Application | Libpng | Libpng | 1.0.53 | All | All | All |
| Application | Libpng | Libpng | 1.0.54 | All | All | All |
| Application | Libpng | Libpng | 1.0.55 | All | All | All |
| Application | Libpng | Libpng | 1.0.56 | All | All | All |
| Application | Libpng | Libpng | 1.0.57 | All | All | All |
| Application | Libpng | Libpng | 1.0.58 | All | All | All |
| Application | Libpng | Libpng | 1.0.59 | All | All | All |
| Application | Libpng | Libpng | 1.0.5a | All | All | All |
| Application | Libpng | Libpng | 1.0.5b | All | All | All |
| Application | Libpng | Libpng | 1.0.5c | All | All | All |
| Application | Libpng | Libpng | 1.0.5d | All | All | All |
| Application | Libpng | Libpng | 1.0.5e | All | All | All |
| Application | Libpng | Libpng | 1.0.5f | All | All | All |
| Application | Libpng | Libpng | 1.0.5g | All | All | All |
| Application | Libpng | Libpng | 1.0.5h | All | All | All |
| Application | Libpng | Libpng | 1.0.5i | All | All | All |
| Application | Libpng | Libpng | 1.0.5j | All | All | All |
| Application | Libpng | Libpng | 1.0.5k | All | All | All |
| Application | Libpng | Libpng | 1.0.5l | All | All | All |
| Application | Libpng | Libpng | 1.0.5m | All | All | All |
| Application | Libpng | Libpng | 1.0.5n | All | All | All |
| Application | Libpng | Libpng | 1.0.5o | All | All | All |
| Application | Libpng | Libpng | 1.0.5p | All | All | All |
| Application | Libpng | Libpng | 1.0.5q | All | All | All |
| Application | Libpng | Libpng | 1.0.5r | All | All | All |
| Application | Libpng | Libpng | 1.0.5s | All | All | All |
| Application | Libpng | Libpng | 1.0.5t | All | All | All |
| Application | Libpng | Libpng | 1.0.5u | All | All | All |
| Application | Libpng | Libpng | 1.0.5v | All | All | All |
| Application | Libpng | Libpng | 1.0.6 | All | All | All |
| Application | Libpng | Libpng | 1.0.60 | All | All | All |
| Application | Libpng | Libpng | 1.0.61 | All | All | All |
| Application | Libpng | Libpng | 1.0.62 | All | All | All |
| Application | Libpng | Libpng | 1.0.63 | All | All | All |
| Application | Libpng | Libpng | 1.0.64 | All | All | All |
| Application | Libpng | Libpng | 1.0.65 | All | All | All |
| Application | Libpng | Libpng | 1.0.66 | All | All | All |
| Application | Libpng | Libpng | 1.0.6d | All | All | All |
| Application | Libpng | Libpng | 1.0.6e | All | All | All |
| Application | Libpng | Libpng | 1.0.6f | All | All | All |
| Application | Libpng | Libpng | 1.0.6g | All | All | All |
| Application | Libpng | Libpng | 1.0.6h | All | All | All |
| Application | Libpng | Libpng | 1.0.6i | All | All | All |
| Application | Libpng | Libpng | 1.0.6j | All | All | All |
| Application | Libpng | Libpng | 1.0.7 | All | All | All |
| Application | Libpng | Libpng | 1.0.8 | All | All | All |
| Application | Libpng | Libpng | 1.0.9 | All | All | All |
| Application | Libpng | Libpng | 1.00 | All | All | All |
| Application | Libpng | Libpng | 1.2.0 | All | All | All |
| Application | Libpng | Libpng | 1.2.1 | All | All | All |
| Application | Libpng | Libpng | 1.2.10 | All | All | All |
| Application | Libpng | Libpng | 1.2.12 | All | All | All |
| Application | Libpng | Libpng | 1.2.13 | All | All | All |
| Application | Libpng | Libpng | 1.2.14 | All | All | All |
| Application | Libpng | Libpng | 1.2.16 | All | All | All |
| Application | Libpng | Libpng | 1.2.18 | All | All | All |
| Application | Libpng | Libpng | 1.2.20 | All | All | All |
| Application | Libpng | Libpng | 1.2.21 | All | All | All |
| Application | Libpng | Libpng | 1.2.22 | All | All | All |
| Application | Libpng | Libpng | 1.2.24 | All | All | All |
| Application | Libpng | Libpng | 1.2.25 | All | All | All |
| Application | Libpng | Libpng | 1.2.26 | All | All | All |
| Application | Libpng | Libpng | 1.2.27 | All | All | All |
| Application | Libpng | Libpng | 1.2.29 | All | All | All |
| Application | Libpng | Libpng | 1.2.3 | All | All | All |
| Application | Libpng | Libpng | 1.2.32 | All | All | All |
| Application | Libpng | Libpng | 1.2.33 | All | All | All |
| Application | Libpng | Libpng | 1.2.35 | All | All | All |
| Application | Libpng | Libpng | 1.2.37 | All | All | All |
| Application | Libpng | Libpng | 1.2.38 | All | All | All |
| Application | Libpng | Libpng | 1.2.39 | All | All | All |
| Application | Libpng | Libpng | 1.2.4 | All | All | All |
| Application | Libpng | Libpng | 1.2.41 | All | All | All |
| Application | Libpng | Libpng | 1.2.42 | All | All | All |
| Application | Libpng | Libpng | 1.2.44 | All | All | All |
| Application | Libpng | Libpng | 1.2.45 | All | All | All |
| Application | Libpng | Libpng | 1.2.46 | All | All | All |
| Application | Libpng | Libpng | 1.2.47 | All | All | All |
| Application | Libpng | Libpng | 1.2.50 | All | All | All |
| Application | Libpng | Libpng | 1.2.51 | All | All | All |
| Application | Libpng | Libpng | 1.2.52 | All | All | All |
| Application | Libpng | Libpng | 1.2.53 | All | All | All |
| Application | Libpng | Libpng | 1.2.54 | All | All | All |
| Application | Libpng | Libpng | 1.2.55 | All | All | All |
| Application | Libpng | Libpng | 1.2.56 | All | All | All |
| Application | Libpng | Libpng | 1.2.6 | All | All | All |
| Application | Libpng | Libpng | 1.2.8 | All | All | All |
| Application | Libpng | Libpng | 1.4.0 | All | All | All |
| Application | Libpng | Libpng | 1.4.1 | All | All | All |
| Application | Libpng | Libpng | 1.4.10 | All | All | All |
| Application | Libpng | Libpng | 1.4.11 | All | All | All |
| Application | Libpng | Libpng | 1.4.12 | All | All | All |
| Application | Libpng | Libpng | 1.4.13 | All | All | All |
| Application | Libpng | Libpng | 1.4.14 | All | All | All |
| Application | Libpng | Libpng | 1.4.15 | All | All | All |
| Application | Libpng | Libpng | 1.4.16 | All | All | All |
| Application | Libpng | Libpng | 1.4.17 | All | All | All |
| Application | Libpng | Libpng | 1.4.18 | All | All | All |
| Application | Libpng | Libpng | 1.4.19 | All | All | All |
| Application | Libpng | Libpng | 1.4.2 | All | All | All |
| Application | Libpng | Libpng | 1.4.3 | All | All | All |
| Application | Libpng | Libpng | 1.4.4 | All | All | All |
| Application | Libpng | Libpng | 1.4.5 | All | All | All |
| Application | Libpng | Libpng | 1.4.6 | All | All | All |
| Application | Libpng | Libpng | 1.4.7 | All | All | All |
| Application | Libpng | Libpng | 1.4.8 | All | All | All |
| Application | Libpng | Libpng | 1.4.9 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| oss-security - Re: libpng NULL pointer dereference bugfix | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | Mailing List, Third Party Advisory |
| oss-security - libpng NULL pointer dereference bugfix | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | Mailing List, Third Party Advisory |
| USN-3712-2: libpng vulnerability | Ubuntu security notices | af854a3a-2127-422b-91ae-364da2661108 | usn.ubuntu.com | |
| lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e69... | af854a3a-2127-422b-91ae-364da2661108 | lists.apache.org | |
| libpng: Remote execution of arbitrary code (GLSA 201701-74) — Gentoo security | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| USN-3712-1: libpng vulnerabilities | Ubuntu security notices | Ubuntu | af854a3a-2127-422b-91ae-364da2661108 | usn.ubuntu.com | |
| lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450... | af854a3a-2127-422b-91ae-364da2661108 | lists.apache.org | |
| libpng NULL pointer Dereference 'png_set_text_2()' Function Remote Denial of Service Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Pony Mail! | MITRE | lists.apache.org | |
| Pony Mail! | MITRE | lists.apache.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 710508 Gentoo Linux libpng Remote execution of arbitrary code Vulnerability (GLSA 201701-74)