CVE-2009-0040— Libpng库未初始化指针数组内存破坏漏洞

EPSS 8.28% · P92 更新日 2026-02-21

新しい脆弱性情報の通知を購読するログインして購読

I. CVE-2009-0040の基本情報

脆弱性情報

脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！

Shenlongの10の質問を表示 ↗

高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。

脆弱性タイトル

N/A

ソース: NVD (National Vulnerability Database)

脆弱性説明

The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.

ソース: NVD (National Vulnerability Database)

CVSS情報

N/A

ソース: NVD (National Vulnerability Database)

脆弱性タイプ

N/A

ソース: NVD (National Vulnerability Database)

脆弱性タイトル

Libpng库未初始化指针数组内存破坏漏洞

ソース: CNNVD (China National Vulnerability Database)

脆弱性説明

libpng是一个可对PNG图形文件实现创建、读写等操作的PNG参考库。如果应用程序耗尽内存的话，libpng库在释放数组单元之前没有正确地初始化某些指针数组，这可能导致内存破坏。在malloc包含有N个单元的数组时： for (i=0; ilt;N; i++) malloc element[i]; 如果应用程序在循环期间耗尽了内存的话，就不会初始化一些单元指针，之后Libpng会跳转到一个试图释放数组中所有单元(包括未初始化的区)的cleanup进程。 libpng库存在5种出现bug的情况。一种在

ソース: CNNVD (China National Vulnerability Database)

CVSS情報

N/A

ソース: CNNVD (China National Vulnerability Database)

脆弱性タイプ

N/A

ソース: CNNVD (China National Vulnerability Database)

影響を受ける製品

ベンダー	プロダクト	影響を受けるバージョン	CPE	購読
-	n/a	n/a	-

II. CVE-2009-0040の公開POC

#	POC説明	ソースリンク	Shenlongリンク

AI生成POCプレミアム

公開POCは見つかりませんでした。

ログインしてAI POCを生成

III. CVE-2009-0040のインテリジェンス情報

请登录查看更多情报信息。

http://support.avaya.com/japple/css/japple?temp.documentID=366362&temp.productID=154235&temp.releaseID=361845&temp.bucketID=126655&PAGE=Documentx_refsource_CONFIRM
http://support.apple.com/kb/HT3549x_refsource_CONFIRM
http://support.avaya.com/elmodocs2/security/ASA-2009-208.htmx_refsource_CONFIRM
http://support.apple.com/kb/HT3757x_refsource_CONFIRM
http://wiki.rpath.com/Advisories:rPSA-2009-0046x_refsource_CONFIRM
http://www.vmware.com/security/advisories/VMSA-2009-0007.htmlx_refsource_CONFIRM
http://support.avaya.com/elmodocs2/security/ASA-2009-069.htmx_refsource_CONFIRM
http://sourceforge.net/project/shownotes.php?group_id=1689&release_id=662441x_refsource_CONFIRM
http://support.apple.com/kb/HT3613x_refsource_CONFIRM
http://downloads.sourceforge.net/libpng/libpng-1.2.34-ADVISORY.txtx_refsource_CONFIRM
http://support.apple.com/kb/HT3639x_refsource_CONFIRM
ftp://ftp.simplesystems.org/pub/png/src/libpng-1.2.34-ADVISORY.txtx_refsource_CONFIRM
http://secunia.com/advisories/35379third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34152third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34137third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/33970third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34464third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/35258third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34388third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34265third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/35386third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34272third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34143third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/33990vdb-entryx_refsource_BID
http://secunia.com/advisories/35302third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34324third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34462third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34210third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/33827vdb-entryx_refsource_BID
http://secunia.com/advisories/34320third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/36096third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34145third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/35074third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34140third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/33976third-party-advisoryx_refsource_SECUNIA
http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1vendor-advisoryx_refsource_SUNALERT
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1vendor-advisoryx_refsource_SUNALERT
http://www.debian.org/security/2009/dsa-1830vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2009/dsa-1750vendor-advisoryx_refsource_DEBIAN
http://www.us-cert.gov/cas/techalerts/TA09-218A.htmlthird-party-advisoryx_refsource_CERT
http://www.us-cert.gov/cas/techalerts/TA09-133A.htmlthird-party-advisoryx_refsource_CERT
http://www.kb.cert.org/vuls/id/649212third-party-advisoryx_refsource_CERT-VN
http://www.vupen.com/english/advisories/2009/1560vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2009/0473vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2009/0632vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2009/2172vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2009/1522vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2009/1462vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2009/1621vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2009/0469vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2009/1297vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2009/1451vdb-entryx_refsource_VUPEN
http://www.redhat.com/support/errata/RHSA-2009-0315.htmlvendor-advisoryx_refsource_REDHAT
http://security.gentoo.org/glsa/glsa-201209-25.xmlvendor-advisoryx_refsource_GENTOO
http://www.mandriva.com/security/advisories?name=MDVSA-2009:051vendor-advisoryx_refsource_MANDRIVA
http://www.redhat.com/support/errata/RHSA-2009-0325.htmlvendor-advisoryx_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=MDVSA-2009:083vendor-advisoryx_refsource_MANDRIVA
http://www.mandriva.com/security/advisories?name=MDVSA-2009:075vendor-advisoryx_refsource_MANDRIVA
http://www.redhat.com/support/errata/RHSA-2009-0333.htmlvendor-advisoryx_refsource_REDHAT
http://security.gentoo.org/glsa/glsa-200903-28.xmlvendor-advisoryx_refsource_GENTOO
http://www.redhat.com/support/errata/RHSA-2009-0340.htmlvendor-advisoryx_refsource_REDHAT
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952vendor-advisoryx_refsource_SLACKWARE
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420vendor-advisoryx_refsource_SLACKWARE
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00412.htmlvendor-advisoryx_refsource_FEDORA
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.htmlvendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.htmlvendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.htmlvendor-advisoryx_refsource_SUSE
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00272.htmlvendor-advisoryx_refsource_FEDORA
https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.htmlvendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.htmlvendor-advisoryx_refsource_SUSE
http://lists.apple.com/archives/security-announce/2009/May/msg00002.htmlvendor-advisoryx_refsource_APPLE
http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.htmlvendor-advisoryx_refsource_APPLE
http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.htmlvendor-advisoryx_refsource_APPLE
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.htmlvendor-advisoryx_refsource_APPLE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6458vdb-entrysignaturex_refsource_OVAL
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10316vdb-entrysignaturex_refsource_OVAL
http://www.securityfocus.com/archive/1/501767/100/0/threadedmailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/505990/100/0/threadedmailing-listx_refsource_BUGTRAQ
http://sourceforge.net/mailarchive/message.php?msg_name=e56ccc8f0902181726i200f4bf0n20d919473ec409b7%40mail.gmail.commailing-listx_refsource_MLIST
http://www.securityfocus.com/archive/1/503912/100/0/threadedmailing-listx_refsource_BUGTRAQ
http://lists.vmware.com/pipermail/security-announce/2009/000062.htmlmailing-listx_refsource_MLIST
https://nvd.nist.gov/vuln/detail/CVE-2009-0040

Same Patch Batch · n/a · 2009-02-22 · 11 CVEs total

CVE-2009-0440		IBM WebSphere Partner Gateway RNIF文档绕过安全限制漏洞
CVE-2009-0672		Ravenphpscripts Raven Web Services RavenNuke 'Resend_Email'模块SQL注入漏洞
CVE-2009-0673		Ravenphpscripts Raven Web Services RavenNuke '你的账户'模块'自定义范围'参数注入漏洞
CVE-2009-0674		Ravenphpscripts Raven Web Services RavenNuke ‘images/captcha.php’代码注入漏洞
CVE-2009-0675		Linux Kernel SysKonnect FDDI驱动非授权重置统计漏洞
CVE-2009-0676		Linux Kernel sock.c SO_BSDCOMPAT选项信息泄露漏洞
CVE-2009-0677		Ravenphpscripts Raven Web Services RavenNuke'你的账户'模块任意代码执行漏洞
CVE-2009-0678		Ravenphpscripts RavenNuke ’images/captcha.php‘ 信息泄露漏洞
CVE-2009-0679		Ravenphpscripts RavenNuke '你的账户'模块跨站脚本漏洞
CVE-2009-0680		NetGear SSL312 目录遍历漏洞

IV. 関連脆弱性

同じ製品: n/a

同じベンダー: n/a

V. CVE-2009-0040へのコメント

まだコメントはありません

目標達成すべての支援者に感謝 — 100%達成しました！

CVE-2009-0040— Libpng库未初始化指针数组内存破坏漏洞

I. CVE-2009-0040の基本情報

脆弱性情報

脆弱性タイトル

脆弱性説明

CVSS情報

脆弱性タイプ

脆弱性タイトル

脆弱性説明

CVSS情報

脆弱性タイプ

影響を受ける製品

II. CVE-2009-0040の公開POC

III. CVE-2009-0040のインテリジェンス情報

Same Patch Batch · n/a · 2009-02-22 · 11 CVEs total

IV. 関連脆弱性

V. CVE-2009-0040へのコメント

コメントを残す

目標達成 すべての支援者に感謝 — 100%達成しました！

CVE-2009-0040— Libpng库未初始化指针数组内存破坏漏洞

I. CVE-2009-0040の基本情報

脆弱性情報

脆弱性タイトル

脆弱性説明

CVSS情報

脆弱性タイプ

脆弱性タイトル

脆弱性説明

CVSS情報

脆弱性タイプ

影響を受ける製品

II. CVE-2009-0040の公開POC

III. CVE-2009-0040のインテリジェンス情報

Same Patch Batch · n/a · 2009-02-22 · 11 CVEs total

IV. 関連脆弱性

V. CVE-2009-0040へのコメント

コメントを残す

目標達成すべての支援者に感謝 — 100%達成しました！