Oval Definition:oval:com.ubuntu.precise:def:20157981000
Revision Date:2015-11-24Version:1
Title:CVE-2015-7981 on Ubuntu 12.04 LTS (precise) - low.
Description:The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data in an image file, which triggers an out-of-bounds read.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2015-7981
Platform(s):Ubuntu 12.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 12.04 LTS (precise) is installed.
  • AND Package Information
  • NOT While related to the CVE in some way, the 'chromium-browser' package in precise is not affected (note: 'uses system libpng').
  • OR NOT While related to the CVE in some way, the 'firefox' package in precise is not affected (note: 'bundles libpng 1.6.18').
  • OR The 'libpng' package in precise was vulnerable but has been fixed (note: '1.2.46-3ubuntu4.1').
  • OR NOT While related to the CVE in some way, the 'thunderbird' package in precise is not affected (note: 'bundles libpng 1.6.16').
    • BACK