NetSight
IP …
high8.8

CVE-2011-2690

Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_…

Impact

Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image.

Affected products

VendorProductAffected versions
LibpngLibpng
from 1.0.0 before 1.0.55
from 1.2.0 before 1.2.45
from 1.4.0 before 1.4.8
from 1.5.0 before 1.5.4
FedoraprojectFedora
Version 14
DebianDebian Linux
Versions 5.0, 6.0
CanonicalUbuntu Linux
Versions 8.04, 10.04, 10.10, 11.04

Weakness classification

CWE-120

References