Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2011-2690
HistoryJul 17, 2011 - 12:00 a.m.

CVE-2011-2690

2011-07-1700:00:00
ubuntu.com
ubuntu.com
13

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.013

Percentile

85.7%

JSON

Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x
before 1.4.8, and 1.5.x before 1.5.4, when used by an application that
calls the png_rgb_to_gray function but not the png_set_expand function,
allows remote attackers to overwrite memory with an arbitrary amount of
data, and possibly have unspecified other impact, via a crafted PNG image.

Bugs

Notes

Author Note
jdstrand firefox 3.6.23 has 1.2.35 and 7.0.1 has 1.4.7
micahg per https://bugzilla.mozilla.org/show_bug.cgi?id=669863#c2 Firefox 7+ isn’t vulnerable
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchchromium-browser< 14.0.835.202~r103287-0ubuntu0.10.04.2UNKNOWN
ubuntu10.10noarchchromium-browser< 14.0.835.202~r103287-0ubuntu0.10.10.1UNKNOWN
ubuntu11.04noarchchromium-browser< 14.0.835.202~r103287-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchchromium-browser< 14.0.835.202~r103287-0ubuntu1UNKNOWN
ubuntu8.04noarchlibpng< 1.2.15~beta5-3ubuntu0.4UNKNOWN
ubuntu10.04noarchlibpng< 1.2.42-1ubuntu2.2UNKNOWN
ubuntu10.10noarchlibpng< 1.2.44-1ubuntu0.1UNKNOWN
ubuntu11.04noarchlibpng< 1.2.44-1ubuntu3.1UNKNOWN

Related

veracode 1
prion 1
nvd 1
cvelist 1
cve 1
osv 1
nessus 28
openvas 45
redhat 2
centos 1
altlinux 3
fedora 12
ubuntu 1
securityvulns 4
oraclelinux 3
debian 1
gentoo 1
veracode
veracode
Arbitrary Code Execution
2020-04-10 01:03:15
prion
prion
Buffer overflow
2011-07-17 20:55:00
nvd
nvd
CVE-2011-2690
2011-07-17 20:55:01
cvelist
cvelist
CVE-2011-2690
2011-07-17 20:00:00
cve
cve
CVE-2011-2690
2011-07-17 20:55:01
osv
osv
libpng - several vulnerabilities
2011-07-28 00:00:00
nessus
nessus
Oracle Linux 5 : libpng (ELSA-2011-1104)
2013-07-12 00:00:00
RHEL 5 : libpng (RHSA-2011:1104)
2011-07-29 00:00:00
Fedora 15 : mingw32-libpng-1.4.8-1.fc15 (2011-10928)
2011-08-29 00:00:00
openvas
openvas
CentOS Update for libpng CESA-2011:1104 centos5 i386
2011-09-23 00:00:00
RedHat Update for libpng RHSA-2011:1104-01
2011-08-02 00:00:00
RedHat Update for libpng RHSA-2011:1104-01
2011-08-02 00:00:00
redhat
redhat
(RHSA-2011:1104) Moderate: libpng security update
2011-07-28 00:00:00
(RHSA-2011:1105) Moderate: libpng security update
2011-07-28 00:00:00
centos
centos
libpng security update
2011-09-03 18:50:49
altlinux
altlinux
Security fix for the ALT Linux 5 package libpng version 1.2.46-alt1
2011-07-13 00:00:00
Security fix for the ALT Linux 5 package libpng version 1.2.46-alt0.M50P.1
2011-12-05 00:00:00
Security fix for the ALT Linux 6 package libpng version 1.2.46-alt1
2011-07-13 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: mingw32-libpng-1.4.8-1.fc14
2011-08-26 19:00:14
[SECURITY] Fedora 15 Update: mingw32-libpng-1.4.8-1.fc15
2011-08-26 18:56:16
[SECURITY] Fedora 15 Update: libpng-1.2.46-1.fc15
2011-07-18 22:38:24
ubuntu
ubuntu
libpng vulnerabilities
2011-07-26 00:00:00
securityvulns
securityvulns
libpng library multiple security vulnerabilities
2011-07-26 00:00:00
[USN-1175-1] libpng vulnerabilities
2011-07-26 00:00:00
Apple OS X multiple security vulnerabilities
2011-10-24 00:00:00
oraclelinux
oraclelinux
libpng security update
2011-07-28 00:00:00
libpng security update
2011-07-28 00:00:00
libpng security update
2011-08-01 00:00:00
debian
debian
[SECURITY] [DSA 2287-1] libpng security update
2011-07-28 16:23:46
gentoo
gentoo
libpng: Multiple vulnerabilities
2012-06-22 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.013

Percentile

85.7%

JSON
Related for UB:CVE-2011-2690
veracode1prion1nvd1cvelist1cve1osv1nessus28openvas45redhat2centos1altlinux3fedora12ubuntu1securityvulns4oraclelinux3debian1gentoo1