← back
CVE-2011-2501

CVE-2011-2501

EPSS 3.4%
The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commit%3Bh=65e6d5a34f49acdb362a0625a706c6b914e670afhttp://lists.fedoraproject.org/pipermail/package-announce/2011-July/062720.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=717084http://secunia.com/advisories/45046http://secunia.com/advisories/45289http://secunia.com/advisories/45405http://secunia.com/advisories/45415http://secunia.com/advisories/45460http://secunia.com/advisories/45486http://secunia.com/advisories/45492http://secunia.com/advisories/49660