CVE-2011-2501
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 3.5%
The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.
Productos afectados
n/a · n/aReferencias
http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commit%3Bh=65e6d5a34f49acdb362a0625a706c6b914e670afhttp://lists.fedoraproject.org/pipermail/package-announce/2011-July/062720.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=717084http://secunia.com/advisories/45046http://secunia.com/advisories/45289http://secunia.com/advisories/45405http://secunia.com/advisories/45415http://secunia.com/advisories/45460http://secunia.com/advisories/45486http://secunia.com/advisories/45492http://secunia.com/advisories/49660