2 matches found
SUSE CVE-2011-3464
Off-by-one error in the pngformattedwarning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via unspecified vectors, which trigger a stack-based buffer overflow...
AZL-41475 CVE-2011-2691 affecting package syslinux for versions less than 6.04-11
The pngerr function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service application crash vi...