Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-3048
HistoryMay 29, 2012 - 8:55 p.m.

CVE-2011-3048

2012-05-2920:55:00
CWE-119
[email protected]
web.nvd.nist.gov
48
cve-2011-3048
png_set_text_2
libpng
denial of service
code execution
buffer overflow
nvd

8.8 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.056 Low

EPSS

Percentile

93.2%

JSON

The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocation failure that is not properly handled, leading to a heap-based buffer overflow.

References

Related

nessus 30
prion 1
openvas 35
redhat 1
ubuntu 1
veracode 1
fedora 6
f5 2
ubuntucve 1
amazon 1
centos 1
debian 1
altlinux 1
oraclelinux 1
freebsd 1
securityvulns 7
slackware 1
gentoo 1
ibm 1
nessus
nessus
SuSE 11.1 Security Update : libpng (SAT Patch Number 6077)
2013-01-25 00:00:00
Oracle Linux 5 / 6 : libpng (ELSA-2012-0523)
2013-07-12 00:00:00
openSUSE Security Update : libpng (openSUSE-SU-2012:0491-1)
2014-06-13 00:00:00
prion
prion
Heap overflow
2012-05-29 20:55:00
openvas
openvas
CentOS Update for libpng CESA-2012:0523 centos6
2012-07-30 00:00:00
Mandriva Update for libpng MDVSA-2012:046 (libpng)
2012-08-03 00:00:00
Oracle Linux Local Check: ELSA-2012-0523
2015-10-06 00:00:00
redhat
redhat
(RHSA-2012:0523) Moderate: libpng security update
2012-04-25 00:00:00
ubuntu
ubuntu
libpng vulnerability
2012-04-05 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 08:50:57
fedora
fedora
[SECURITY] Fedora 17 Update: libpng-1.5.10-1.fc17
2012-04-12 02:25:15
[SECURITY] Fedora 17 Update: libpng10-1.0.59-1.fc17
2012-04-12 03:10:50
[SECURITY] Fedora 16 Update: libpng-1.2.49-1.fc16
2012-04-24 14:59:35
f5
f5
K15881 : Libpng vulnerability CVE-2011-3048
2014-12-19 00:00:00
SOL15881 - Libpng vulnerability CVE-2011-3048
2014-11-27 00:00:00
ubuntucve
ubuntucve
CVE-2011-3048
2011-12-31 00:00:00
amazon
amazon
Medium: libpng
2012-04-30 14:52:00
centos
centos
libpng security update
2012-04-25 13:17:13
debian
debian
[SECURITY] [DSA 2446-1] libpng security update
2012-04-04 19:13:41
altlinux
altlinux
Security fix for the ALT Linux 6 package libpng version 1.2.49-alt1
2012-04-05 00:00:00
oraclelinux
oraclelinux
libpng security update
2012-04-25 00:00:00
freebsd
freebsd
png -- memory corruption/possible remote code execution
2012-03-29 00:00:00
securityvulns
securityvulns
libpng integer overflow
2012-02-22 00:00:00
Apple Mac OS X multiple security vulnerabilities
2012-10-01 00:00:00
Apple TV multiple security vulnerabilities
2012-10-04 00:00:00
slackware
slackware
[slackware-security] libpng
2012-07-25 03:00:37
gentoo
gentoo
libpng: Multiple vulnerabilities
2012-06-22 00:00:00
ibm
ibm
Security Bulletin: Gdal vulnerabilities affect IBM Netezza Analytics for NPS
2022-06-03 14:32:29

8.8 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.056 Low

EPSS

Percentile

93.2%

JSON
Related for CVE-2011-3048
nessus30prion1openvas35redhat1ubuntu1veracode1fedora6f52ubuntucve1amazon1centos1debian1altlinux1oraclelinux1freebsd1securityvulns7slackware1gentoo1ibm1