Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2014-0333
Deferred
More InfoOfficial Page
Source-cret@cert.org
View Known Exploited Vulnerability (KEV) details
Published At-27 Feb, 2014 | 20:55
Updated At-12 Apr, 2025 | 10:46

The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an IDAT chunk with a length of zero.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.05.0MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
CPE Matches
libpng
libpng
>>libpng>>1.6.0
cpe:2.3:a:libpng:libpng:1.6.0:*:*:*:*:*:*:*
libpng
libpng
>>libpng>>1.6.0
cpe:2.3:a:libpng:libpng:1.6.0:beta:*:*:*:*:*:*
libpng
libpng
>>libpng>>1.6.1
cpe:2.3:a:libpng:libpng:1.6.1:*:*:*:*:*:*:*
libpng
libpng
>>libpng>>1.6.1
cpe:2.3:a:libpng:libpng:1.6.1:beta:*:*:*:*:*:*
libpng
libpng
>>libpng>>1.6.2
cpe:2.3:a:libpng:libpng:1.6.2:*:*:*:*:*:*:*
libpng
libpng
>>libpng>>1.6.2
cpe:2.3:a:libpng:libpng:1.6.2:beta:*:*:*:*:*:*
libpng
libpng
>>libpng>>1.6.3
cpe:2.3:a:libpng:libpng:1.6.3:*:*:*:*:*:*:*
libpng
libpng
>>libpng>>1.6.3
cpe:2.3:a:libpng:libpng:1.6.3:beta:*:*:*:*:*:*
libpng
libpng
>>libpng>>1.6.4
cpe:2.3:a:libpng:libpng:1.6.4:*:*:*:*:*:*:*
libpng
libpng
>>libpng>>1.6.4
cpe:2.3:a:libpng:libpng:1.6.4:beta:*:*:*:*:*:*
libpng
libpng
>>libpng>>1.6.5
cpe:2.3:a:libpng:libpng:1.6.5:*:*:*:*:*:*:*
libpng
libpng
>>libpng>>1.6.6
cpe:2.3:a:libpng:libpng:1.6.6:*:*:*:*:*:*:*
libpng
libpng
>>libpng>>1.6.7
cpe:2.3:a:libpng:libpng:1.6.7:*:*:*:*:*:*:*
libpng
libpng
>>libpng>>1.6.7
cpe:2.3:a:libpng:libpng:1.6.7:beta:*:*:*:*:*:*
libpng
libpng
>>libpng>>1.6.8
cpe:2.3:a:libpng:libpng:1.6.8:*:*:*:*:*:*:*
libpng
libpng
>>libpng>>1.6.8
cpe:2.3:a:libpng:libpng:1.6.8:beta:*:*:*:*:*:*
libpng
libpng
>>libpng>>1.6.9
cpe:2.3:a:libpng:libpng:1.6.9:*:*:*:*:*:*:*
libpng
libpng
>>libpng>>1.6.9
cpe:2.3:a:libpng:libpng:1.6.9:beta:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-189Primarynvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
ftp://ftp.simplesystems.org/pub/png/src/libpng16/patch-libpng16-vu684412.diffcret@cert.org
Patch
http://lists.opensuse.org/opensuse-updates/2014-03/msg00029.htmlcret@cert.org
N/A
http://www.kb.cert.org/vuls/id/684412cret@cert.org
Patch
US Government Resource
https://sourceforge.net/projects/libpng/files/libpng16/patch-libpng16-vu684412.diffcret@cert.org
N/A
ftp://ftp.simplesystems.org/pub/png/src/libpng16/patch-libpng16-vu684412.diffaf854a3a-2127-422b-91ae-364da2661108
Patch
http://lists.opensuse.org/opensuse-updates/2014-03/msg00029.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.kb.cert.org/vuls/id/684412af854a3a-2127-422b-91ae-364da2661108
Patch
US Government Resource
https://sourceforge.net/projects/libpng/files/libpng16/patch-libpng16-vu684412.diffaf854a3a-2127-422b-91ae-364da2661108
N/A
Change History
0Changes found
Details not found