NetSight
IP …
medium6.5

CVE-2011-2691

The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a…

Impact

The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service (application crash) via a crafted PNG image.

Affected products

VendorProductAffected versions
LibpngLibpng
from 1.0.0 before 1.0.55
from 1.2.0 before 1.2.45
from 1.4.0 before 1.4.8
from 1.5.0 before 1.5.4
FedoraprojectFedora
Version 14
DebianDebian Linux
Versions 5.0, 6.0

Weakness classification

CWE-476

References