CVE-2010-2249

Key facts

CVSS score

6.5 (v3.1)

Severity

MEDIUM

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness (CWE)

CWE-401

EPSS score

2.6% (85th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2010-2261)

Published

June 30, 2010

NVD last modified

June 16, 2026

Status

Modified

Affected products

• apple / iphone os
• apple / itunes
• apple / safari
• apple / tvos
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• debian / debian linux
• fedoraproject / fedora
• fedoraproject / fedora
• libpng / libpng
• opensuse / opensuse
• opensuse / opensuse
• suse / linux enterprise server
• suse / linux enterprise server
• suse / linux enterprise server
• suse / linux enterprise server
• vmware / player
• vmware / workstation

Certified products that may be affected

2 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• SUSE Linux Enterprise Server Version 9 with Service Pack 2, ProPack 4 for Service Pack 2 and certification-sles-sgi-eal3 package - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0292-2005 - archived
• SuSE Linux Enterprise Server Version 9 with certification-sles-ibm-eal4 package - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0256-2005 - archived

References

• http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=90cfcecc09febb8d6c8c1d37ea7bb7cf0f4b00f3#patch20
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html(Mailing List, Third Party Advisory)
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html(Mailing List, Third Party Advisory)
• http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html(Mailing List, Third Party Advisory)
• http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html(Mailing List, Third Party Advisory)
• http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044283.html(Mailing List, Third Party Advisory)
• http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044397.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html(Mailing List, Third Party Advisory)
• http://lists.vmware.com/pipermail/security-announce/2010/000105.html(Mailing List, Third Party Advisory)
• http://secunia.com/advisories/40302(Broken Link)
• http://secunia.com/advisories/40336(Broken Link)
• http://secunia.com/advisories/40472(Broken Link)
• http://secunia.com/advisories/40547(Broken Link)
• http://secunia.com/advisories/41574(Broken Link)
• http://secunia.com/advisories/42314(Broken Link)
• http://secunia.com/advisories/42317(Broken Link)
• http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.613061(Mailing List, Patch, Third Party Advisory)
• http://support.apple.com/kb/HT4435(Broken Link)
• http://support.apple.com/kb/HT4456(Third Party Advisory)
• http://support.apple.com/kb/HT4457(Third Party Advisory)
• http://support.apple.com/kb/HT4554(Third Party Advisory)
• http://support.apple.com/kb/HT4566(Broken Link)
• http://www.debian.org/security/2010/dsa-2072(Third Party Advisory)
• http://www.libpng.org/pub/png/libpng.html(Product, Vendor Advisory)
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:133(Broken Link)
• http://www.securityfocus.com/bid/41174(Patch, Third Party Advisory, VDB Entry)
• http://www.securitytracker.com/id?1024723(Third Party Advisory, VDB Entry)
• http://www.ubuntu.com/usn/USN-960-1(Third Party Advisory)
• http://www.vmware.com/security/advisories/VMSA-2010-0014.html(Third Party Advisory)
• http://www.vupen.com/english/advisories/2010/1612(Broken Link)
• http://www.vupen.com/english/advisories/2010/1637(Broken Link)
• http://www.vupen.com/english/advisories/2010/1755(Broken Link)
• http://www.vupen.com/english/advisories/2010/1837(Broken Link)
• http://www.vupen.com/english/advisories/2010/1846(Broken Link)
• http://www.vupen.com/english/advisories/2010/1877(Broken Link)
• http://www.vupen.com/english/advisories/2010/2491(Broken Link)
• http://www.vupen.com/english/advisories/2010/3045(Broken Link)
• http://www.vupen.com/english/advisories/2010/3046(Broken Link)
• https://bugzilla.redhat.com/show_bug.cgi?id=608644(Issue Tracking, Patch, Third Party Advisory)
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59816(Third Party Advisory, VDB Entry)