Lucene search

[email protected]NVD:CVE-2011-3048

HistoryMay 29, 2012 - 8:55 p.m.

CVE-2011-3048

2012-05-2920:55:04

CWE-119

[email protected]

web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.1 High

AI Score

Confidence

High

0.058 Low

EPSS

Percentile

93.4%

JSON

The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocation failure that is not properly handled, leading to a heap-based buffer overflow.

Affected configurations

NVD

Node

libpnglibpngMatch1.0.0

libpnglibpngMatch1.0.1

libpnglibpngMatch1.0.2

libpnglibpngMatch1.0.3

libpnglibpngMatch1.0.5

libpnglibpngMatch1.0.6

libpnglibpngMatch1.0.7

libpnglibpngMatch1.0.8

libpnglibpngMatch1.0.9

libpnglibpngMatch1.0.10

libpnglibpngMatch1.0.11

libpnglibpngMatch1.0.12

libpnglibpngMatch1.0.13

libpnglibpngMatch1.0.14

libpnglibpngMatch1.0.15

libpnglibpngMatch1.0.16

libpnglibpngMatch1.0.17

libpnglibpngMatch1.0.18

libpnglibpngMatch1.0.19

libpnglibpngMatch1.0.20

libpnglibpngMatch1.0.21

libpnglibpngMatch1.0.22

libpnglibpngMatch1.0.23

libpnglibpngMatch1.0.24

libpnglibpngMatch1.0.25

libpnglibpngMatch1.0.26

libpnglibpngMatch1.0.27

libpnglibpngMatch1.0.28

libpnglibpngMatch1.0.29

libpnglibpngMatch1.0.30

libpnglibpngMatch1.0.31

libpnglibpngMatch1.0.32

libpnglibpngMatch1.0.33

libpnglibpngMatch1.0.34

libpnglibpngMatch1.0.35

libpnglibpngMatch1.0.37

libpnglibpngMatch1.0.38

libpnglibpngMatch1.0.39

libpnglibpngMatch1.0.40

libpnglibpngMatch1.0.41

libpnglibpngMatch1.0.42

libpnglibpngMatch1.0.43

libpnglibpngMatch1.0.44

libpnglibpngMatch1.0.45

libpnglibpngMatch1.0.46

libpnglibpngMatch1.0.47

libpnglibpngMatch1.0.48

libpnglibpngMatch1.0.50

libpnglibpngMatch1.0.51

libpnglibpngMatch1.0.52

libpnglibpngMatch1.0.53

libpnglibpngMatch1.0.54

libpnglibpngMatch1.0.55

libpnglibpngMatch1.0.55rc01

libpnglibpngMatch1.0.56

libpnglibpngMatch1.0.56devel

libpnglibpngMatch1.0.57

libpnglibpngMatch1.0.57rc01

libpnglibpngMatch1.0.58

Node

libpnglibpngMatch1.2.0

libpnglibpngMatch1.2.1

libpnglibpngMatch1.2.2

libpnglibpngMatch1.2.3

libpnglibpngMatch1.2.4

libpnglibpngMatch1.2.5

libpnglibpngMatch1.2.6

libpnglibpngMatch1.2.7

libpnglibpngMatch1.2.8

libpnglibpngMatch1.2.9

libpnglibpngMatch1.2.10

libpnglibpngMatch1.2.11

libpnglibpngMatch1.2.12

libpnglibpngMatch1.2.13

libpnglibpngMatch1.2.14

libpnglibpngMatch1.2.15

libpnglibpngMatch1.2.16

libpnglibpngMatch1.2.17

libpnglibpngMatch1.2.18

libpnglibpngMatch1.2.19

libpnglibpngMatch1.2.20

libpnglibpngMatch1.2.21

libpnglibpngMatch1.2.22

libpnglibpngMatch1.2.23

libpnglibpngMatch1.2.24

libpnglibpngMatch1.2.25

libpnglibpngMatch1.2.26

libpnglibpngMatch1.2.27

libpnglibpngMatch1.2.28

libpnglibpngMatch1.2.29

libpnglibpngMatch1.2.30

libpnglibpngMatch1.2.31

libpnglibpngMatch1.2.32

libpnglibpngMatch1.2.33

libpnglibpngMatch1.2.34

libpnglibpngMatch1.2.35

libpnglibpngMatch1.2.36

libpnglibpngMatch1.2.37

libpnglibpngMatch1.2.38

libpnglibpngMatch1.2.39

libpnglibpngMatch1.2.40

libpnglibpngMatch1.2.41

libpnglibpngMatch1.2.42

libpnglibpngMatch1.2.43

libpnglibpngMatch1.2.43devel

libpnglibpngMatch1.2.44

libpnglibpngMatch1.2.45

libpnglibpngMatch1.2.45devel

libpnglibpngMatch1.2.46

libpnglibpngMatch1.2.46devel

libpnglibpngMatch1.2.47

libpnglibpngMatch1.2.47beta

libpnglibpngMatch1.2.48

libpnglibpngMatch1.2.48betas

Node

libpnglibpngMatch1.4.0

libpnglibpngMatch1.4.1

libpnglibpngMatch1.4.2

libpnglibpngMatch1.4.3

libpnglibpngMatch1.4.4

libpnglibpngMatch1.4.5

libpnglibpngMatch1.4.6

libpnglibpngMatch1.4.7

libpnglibpngMatch1.4.8

libpnglibpngMatch1.4.9

libpnglibpngMatch1.4.10

Node

libpnglibpngMatch1.5.0beta

libpnglibpngMatch1.5.1

libpnglibpngMatch1.5.1beta

libpnglibpngMatch1.5.2

libpnglibpngMatch1.5.2beta

libpnglibpngMatch1.5.3beta

libpnglibpngMatch1.5.4

libpnglibpngMatch1.5.4beta

libpnglibpngMatch1.5.5

libpnglibpngMatch1.5.5beta

libpnglibpngMatch1.5.6

libpnglibpngMatch1.5.6beta

libpnglibpngMatch1.5.7

libpnglibpngMatch1.5.7beta

libpnglibpngMatch1.5.8

libpnglibpngMatch1.5.8beta

libpnglibpngMatch1.5.9

libpnglibpngMatch1.5.9beta

libpnglibpngMatch1.5.10beta

References

lists.apple.com/archives/security-announce/2012/Sep/msg00003.html

lists.apple.com/archives/security-announce/2012/Sep/msg00004.html

lists.fedoraproject.org/pipermail/package-announce/2012-April/077007.html

lists.fedoraproject.org/pipermail/package-announce/2012-April/077043.html

lists.fedoraproject.org/pipermail/package-announce/2012-April/077472.html

lists.fedoraproject.org/pipermail/package-announce/2012-April/077819.html

lists.fedoraproject.org/pipermail/package-announce/2012-April/079039.html

lists.fedoraproject.org/pipermail/package-announce/2012-April/079051.html

rhn.redhat.com/errata/RHSA-2012-0523.html

secunia.com/advisories/48587

secunia.com/advisories/48644

secunia.com/advisories/48665

secunia.com/advisories/48721

secunia.com/advisories/48983

secunia.com/advisories/49660

security.gentoo.org/glsa/glsa-201206-15.xml

support.apple.com/kb/HT5501

support.apple.com/kb/HT5503

ubuntu.com/usn/usn-1417-1

www.debian.org/security/2012/dsa-2446

www.libpng.org/pub/png/libpng.html

www.libpng.org/pub/png/src/libpng-1.5.10-README.txt

www.mandriva.com/security/advisories?name=MDVSA-2012:046

www.osvdb.org/80822

www.securityfocus.com/bid/52830

www.securitytracker.com/id?1026879

exchange.xforce.ibmcloud.com/vulnerabilities/74494

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.1 High

AI Score

Confidence

High

0.058 Low

EPSS

Percentile

93.4%

JSON

Related for NVD:CVE-2011-3048

nessus31 amazon1 f52 ubuntucve1 fedora6 openvas36 veracode1 centos1 ubuntu1 redhat1 prion1 debian1 cve1 freebsd1 oraclelinux1 altlinux1 cvelist1 securityvulns7 slackware1 gentoo1 ibm1