Lucene search
UbuntuUSN-1417-1HistoryApr 05, 2012 - 12:00 a.m.
libpng vulnerability
2012-04-0500:00:00
ubuntu.com
35
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
9
Confidence
High
EPSS
0.058
Percentile
93.4%
Releases
- Ubuntu 11.10
- Ubuntu 11.04
- Ubuntu 10.10
- Ubuntu 10.04
- Ubuntu 8.04
Packages
- libpng - PNG (Portable Network Graphics) file library
Details
It was discovered that libpng incorrectly handled certain memory
operations. If a user or automated system using libpng were tricked into
opening a specially crafted image, an attacker could exploit this to cause
a denial of service or execute code with the privileges of the user
invoking the program.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 8.04 | noarch | libpng12-0 | < 1.2.15~beta5-3ubuntu0.7 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libpng12-0-udeb | < 1.2.15~beta5-3ubuntu0.7 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libpng12-dev | < 1.2.15~beta5-3ubuntu0.7 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libpng12-0 | < 1.2.46-3ubuntu1.3 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libpng12-0-udeb | < 1.2.46-3ubuntu1.3 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libpng12-dev | < 1.2.46-3ubuntu1.3 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libpng3 | < 1.2.46-3ubuntu1.3 | UNKNOWN |
| Ubuntu | 11.04 | noarch | libpng12-0 | < 1.2.44-1ubuntu3.4 | UNKNOWN |
| Ubuntu | 11.04 | noarch | libpng12-0-udeb | < 1.2.44-1ubuntu3.4 | UNKNOWN |
| Ubuntu | 11.04 | noarch | libpng12-dev | < 1.2.44-1ubuntu3.4 | UNKNOWN |
References
Related
amazon
amazon
Medium: libpng
2012-04-30 14:52:00
nessus
nessus
Amazon Linux AMI : libpng (ALAS-2012-68)
2013-09-04 00:00:00
Fedora 17 : libpng10-1.0.59-1.fc17 (2012-4902)
2012-04-12 00:00:00
F5 Networks BIG-IP : Libpng vulnerability (SOL15881)
2014-11-28 00:00:00
openvas
openvas
RedHat Update for libpng RHSA-2012:0523-01
2012-04-26 00:00:00
Ubuntu Update for libpng USN-1417-1
2012-04-11 00:00:00
Fedora Update for libpng FEDORA-2012-5526
2012-08-30 00:00:00
f5
f5
K15881 : Libpng vulnerability CVE-2011-3048
2014-12-19 00:00:00
SOL15881 - Libpng vulnerability CVE-2011-3048
2014-11-27 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 08:50:57
fedora
fedora
[SECURITY] Fedora 17 Update: libpng-1.5.10-1.fc17
2012-04-12 02:25:15
[SECURITY] Fedora 17 Update: libpng10-1.0.59-1.fc17
2012-04-12 03:10:50
[SECURITY] Fedora 16 Update: libpng-1.2.49-1.fc16
2012-04-24 14:59:35
centos
centos
libpng security update
2012-04-25 13:17:13
ubuntucve
ubuntucve
CVE-2011-3048
2011-12-31 00:00:00
debian
debian
[SECURITY] [DSA 2446-1] libpng security update
2012-04-04 19:13:41
cve
cve
CVE-2011-3048
2012-05-29 20:55:04
redhat
redhat
(RHSA-2012:0523) Moderate: libpng security update
2012-04-25 00:00:00
prion
prion
Heap overflow
2012-05-29 20:55:00
freebsd
freebsd
png -- memory corruption/possible remote code execution
2012-03-29 00:00:00
oraclelinux
oraclelinux
libpng security update
2012-04-25 00:00:00
nvd
nvd
CVE-2011-3048
2012-05-29 20:55:04
altlinux
altlinux
Security fix for the ALT Linux 6 package libpng version 1.2.49-alt1
2012-04-05 00:00:00
cvelist
cvelist
CVE-2011-3048
2012-05-29 20:00:00
securityvulns
securityvulns
libpng integer overflow
2012-02-22 00:00:00
Apple Mac OS X multiple security vulnerabilities
2012-10-01 00:00:00
APPLE-SA-2012-09-24-1 Apple TV 5.1
2012-10-04 00:00:00
slackware
slackware
[slackware-security] libpng
2012-07-25 03:00:37
gentoo
gentoo
libpng: Multiple vulnerabilities
2012-06-22 00:00:00
ibm
ibm
Security Bulletin: Gdal vulnerabilities affect IBM Netezza Analytics for NPS
2022-06-03 14:32:29
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
9
Confidence
High
EPSS
0.058
Percentile
93.4%
Related for USN-1417-1