Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-2691
HistoryJul 17, 2011 - 12:00 a.m.

CVE-2011-2691

2011-07-1700:00:00
ubuntu.com
ubuntu.com
12

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.012 Low

EPSS

Percentile

84.9%

The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x
before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function
call using a NULL pointer argument instead of an empty-string argument,
which allows remote attackers to cause a denial of service (application
crash) via a crafted PNG image.

Bugs

Notes

Author Note
mdeslaur On Ubuntu, the affected code isn’t compiled in libpng.
jdstrand firefox 3.6.23 has 1.2.35 and 7.0.1 has 1.4.7
micahg firefox 8 will have 1.4.8
OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchchromium-browser< 14.0.835.202~r103287-0ubuntu0.10.04.2UNKNOWN
ubuntu10.10noarchchromium-browser< 14.0.835.202~r103287-0ubuntu0.10.10.1UNKNOWN
ubuntu11.04noarchchromium-browser< 14.0.835.202~r103287-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchchromium-browser< 14.0.835.202~r103287-0ubuntu1UNKNOWN
ubuntu10.04noarchfirefox< 10.0+build1-0ubuntu0.10.04.2UNKNOWN
ubuntu11.04noarchfirefox< 8.0+build1-0ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchfirefox< 8.0+build1-0ubuntu0.11.10.1UNKNOWN
ubuntu12.04noarchfirefox< 8.0~b4+build1-0ubuntu2UNKNOWN

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.012 Low

EPSS

Percentile

84.9%

Related for UB:CVE-2011-2691