Lucene search
Mozilla FoundationMFSA2012-11HistoryFeb 16, 2012 - 12:00 a.m.
libpng integer overflow — Mozilla
2012-02-1600:00:00
Mozilla Foundation
www.mozilla.org
47
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.832
Percentile
98.5%
An integer overflow in the libpng library can lead to a heap-buffer overflow when decompressing certain PNG images. This leads to a crash, which may be potentially exploitable.
Affected configurations
Node
mozillafirefoxRange<10.0.2
ORmozillafirefoxRange<3.6.27
ORmozillafirefox_esrRange<10.0.2
ORmozillaseamonkeyRange<2.7.2
ORmozillathunderbirdRange<10.0.2
ORmozillathunderbirdRange<3.1.19
ORmozillathunderbird_esrRange<10.0.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | firefox | * | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* |
| mozilla | firefox_esr | * | cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* |
| mozilla | seamonkey | * | cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:* |
| mozilla | thunderbird | * | cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
| mozilla | thunderbird_esr | * | cpe:2.3:a:mozilla:thunderbird_esr:*:*:*:*:*:*:*:* |
Related
nessus
nessus
Mozilla Thunderbird 10.x < 10.0.2 'png_decompress_chunk' Integer Overflow
2012-02-17 00:00:00
openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-5826)
2014-06-13 00:00:00
openSUSE Security Update : libpng12 (libpng12-5846)
2014-06-13 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: xulrunner-10.0.1-3.fc16
2012-02-19 23:17:56
[SECURITY] Fedora 16 Update: libpng10-1.0.57-1.fc16
2012-02-28 10:04:32
[SECURITY] Fedora 17 Update: thunderbird-10.0.1-2.fc17
2012-02-28 10:57:39
ubuntucve
ubuntucve
CVE-2011-3026
2012-02-16 00:00:00
openvas
openvas
Mandriva Update for mozilla MDVSA-2012:022 (mozilla)
2012-08-03 00:00:00
Ubuntu: Security Advisory (USN-1367-4)
2012-02-21 00:00:00
Fedora Update for thunderbird FEDORA-2012-4910
2012-08-30 00:00:00
oraclelinux
oraclelinux
libpng security update
2012-02-20 00:00:00
xulrunner security update
2012-02-16 00:00:00
firefox security update
2012-02-16 00:00:00
veracode
veracode
Denial Of Service (DoS)
2018-11-27 06:57:22
redhat
redhat
(RHSA-2012:0140) Critical: thunderbird security update
2012-02-16 00:00:00
(RHSA-2012:0317) Important: libpng security update
2012-02-20 00:00:00
(RHSA-2012:0143) Critical: xulrunner security update
2012-02-16 00:00:00
ubuntu
ubuntu
Xulrunner vulnerability
2012-02-17 00:00:00
Firefox vulnerability
2012-02-17 00:00:00
Thunderbird vulnerability
2012-02-17 00:00:00
suse
suse
libpng12: Fixed a heap based buffer overflow (important)
2012-02-28 22:36:59
Security update for Mozilla XULrunner (important)
2012-02-27 01:08:16
Security update for libpng (important)
2012-02-28 22:37:10
cert
cert
libpng chunk decompression integer overflow vulnerability
2012-02-23 00:00:00
debian
debian
[SECURITY] [DSA 2410-1] libpng security update
2012-02-15 20:44:25
altlinux
altlinux
Security fix for the ALT Linux 6 package libpng version 1.2.47-alt1
2012-02-20 00:00:00
centos
centos
libpng, libpng10 security update
2012-02-20 21:59:45
seamonkey security update
2012-02-17 01:42:07
firefox security update
2012-02-17 01:39:20
amazon
amazon
Important: libpng
2012-03-04 16:09:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2012-11
2012-02-22 00:00:00
nvd
nvd
CVE-2011-3026
2012-02-16 20:55:04
checkpoint_advisories
checkpoint_advisories
libpng png_decompress_chunk Integer Overflow (CVE-2011-3026)
2012-05-14 00:00:00
libpng png_decompress_chunk Integer Overflow - ver 2 (CVE-2011-3026)
2012-05-10 00:00:00
threatpost
threatpost
Mozilla to Fix Libpng Bug in Firefox and Thunderbird
2012-02-17 18:43:07
cve
cve
CVE-2011-3026
2012-02-16 20:55:04
freebsd
freebsd
mozilla -- heap-buffer overflow
2012-02-16 00:00:00
ImageMagick and GraphicsMagick -- DoS via specially crafted PNG file
2012-07-28 00:00:00
cvelist
cvelist
CVE-2011-3026
2012-02-16 20:00:00
prion
prion
Integer overflow
2012-02-16 20:55:00
Integer overflow
2012-03-22 16:55:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.832
Percentile
98.5%
Related for MFSA2012-11