CVE-2010-1205

Key facts

CVSS score

9.8 (v3.1)

Severity

CRITICAL

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness (CWE)

CWE-120

EPSS score

43.4% (99th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2010-1235)

Published

June 30, 2010

NVD last modified

June 16, 2026

Status

Modified

Affected products

• apple / iphone os
• apple / itunes
• apple / mac os x
• apple / mac os x server
• apple / safari
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• debian / debian linux
• fedoraproject / fedora
• fedoraproject / fedora
• google / chrome
• libpng / libpng
• mozilla / firefox
• mozilla / seamonkey
• mozilla / thunderbird
• opensuse / opensuse
• opensuse / opensuse
• suse / linux enterprise server
• suse / linux enterprise server
• suse / linux enterprise server
• suse / linux enterprise server
• vmware / player
• vmware / workstation

Certified products that may be affected

3 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Apple Mac OS X 10.6 - Apple Inc. - Common Criteria BSI-DSZ-CC-0536-2010 - archived
• SUSE Linux Enterprise Server Version 9 with Service Pack 2, ProPack 4 for Service Pack 2 and certification-sles-sgi-eal3 package - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0292-2005 - archived
• SuSE Linux Enterprise Server Version 9 with certification-sles-ibm-eal4 package - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0256-2005 - archived

References

• http://blackberry.com/btsc/KB27244(Broken Link)
• http://code.google.com/p/chromium/issues/detail?id=45983(Exploit, Issue Tracking, Mailing List, Third Party Advisory)
• http://googlechromereleases.blogspot.com/2010/07/stable-channel-update.html(Release Notes, Third Party Advisory)
• http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=188eb6b42602bf7d7ae708a21897923b6a83fe7c#patch18
• http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html(Mailing List, Third Party Advisory)
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html(Mailing List, Third Party Advisory)
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html(Mailing List, Third Party Advisory)
• http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html(Mailing List, Third Party Advisory)
• http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html(Mailing List, Third Party Advisory)
• http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044283.html(Mailing List, Third Party Advisory)
• http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044397.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html(Mailing List, Third Party Advisory)
• http://lists.vmware.com/pipermail/security-announce/2010/000105.html(Mailing List, Patch, Third Party Advisory)
• http://secunia.com/advisories/40302(Broken Link)
• http://secunia.com/advisories/40336(Broken Link)
• http://secunia.com/advisories/40472(Broken Link)
• http://secunia.com/advisories/40547(Broken Link)
• http://secunia.com/advisories/41574(Broken Link)
• http://secunia.com/advisories/42314(Broken Link)
• http://secunia.com/advisories/42317(Broken Link)
• http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.613061(Mailing List, Patch, Third Party Advisory)
• http://support.apple.com/kb/HT4312(Third Party Advisory)
• http://support.apple.com/kb/HT4435(Broken Link)
• http://support.apple.com/kb/HT4456(Third Party Advisory)
• http://support.apple.com/kb/HT4457(Third Party Advisory)
• http://support.apple.com/kb/HT4554(Third Party Advisory)
• http://support.apple.com/kb/HT4566(Broken Link)
• http://trac.webkit.org/changeset/61816(Patch, Third Party Advisory)
• http://www.debian.org/security/2010/dsa-2072(Third Party Advisory)
• http://www.libpng.org/pub/png/libpng.html(Product, Vendor Advisory)
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:133(Broken Link)
• http://www.mozilla.org/security/announce/2010/mfsa2010-41.html(Third Party Advisory)
• http://www.securityfocus.com/bid/41174(Third Party Advisory, VDB Entry)
• http://www.ubuntu.com/usn/USN-960-1(Third Party Advisory)
• http://www.vmware.com/security/advisories/VMSA-2010-0014.html(Patch, Third Party Advisory)
• http://www.vupen.com/english/advisories/2010/1612(Broken Link)
• http://www.vupen.com/english/advisories/2010/1637(Broken Link)
• http://www.vupen.com/english/advisories/2010/1755(Broken Link)
• http://www.vupen.com/english/advisories/2010/1837(Broken Link)
• http://www.vupen.com/english/advisories/2010/1846(Broken Link)