CVE

Id
50413  
CVE No.
CVE-2011-2501  
Status
Candidate  
Description
The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.  
Phase
Assigned (20110615)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
544915 50413 CVE-2011-2501 MLIST:[oss-security] 20110627 CVE request for libpng regression (CVE-2004-0421)  View
544916 50413 CVE-2011-2501 URL:http://www.openwall.com/lists/oss-security/2011/06/27/13  View
544917 50413 CVE-2011-2501 MLIST:[oss-security] 20110628 Re: CVE request for libpng regression (CVE-2004-0421)  View
544918 50413 CVE-2011-2501 URL:http://www.openwall.com/lists/oss-security/2011/06/28/16  View
544919 50413 CVE-2011-2501 CONFIRM:http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=commit;h=65e6d5a34f49acdb362a0625a706c6b914e670af  View
544920 50413 CVE-2011-2501 CONFIRM:http://sourceforge.net/mailarchive/forum.php?thread_name=BANLkTikrnU6FJNQYFvwmt78hwpgKPVRd1Q%40mail.gmail.com&forum_name=png-mng-implement  View
544921 50413 CVE-2011-2501 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=717084  View
544922 50413 CVE-2011-2501 DEBIAN:DSA-2287  View
544923 50413 CVE-2011-2501 URL:http://www.debian.org/security/2011/dsa-2287  View
544924 50413 CVE-2011-2501 FEDORA:FEDORA-2011-9336  View
544925 50413 CVE-2011-2501 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.html  View
544926 50413 CVE-2011-2501 FEDORA:FEDORA-2011-8868  View
544927 50413 CVE-2011-2501 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062720.html  View
544928 50413 CVE-2011-2501 GENTOO:GLSA-201206-15  View
544929 50413 CVE-2011-2501 URL:http://security.gentoo.org/glsa/glsa-201206-15.xml  View
544930 50413 CVE-2011-2501 MANDRIVA:MDVSA-2011:151  View
544931 50413 CVE-2011-2501 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:151  View
544932 50413 CVE-2011-2501 REDHAT:RHSA-2011:1105  View
544933 50413 CVE-2011-2501 URL:http://www.redhat.com/support/errata/RHSA-2011-1105.html  View
544934 50413 CVE-2011-2501 SLACKWARE:SSA:2011-210-01  View
544935 50413 CVE-2011-2501 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.617466  View
544936 50413 CVE-2011-2501 UBUNTU:USN-1175-1  View
544937 50413 CVE-2011-2501 URL:http://www.ubuntu.com/usn/USN-1175-1  View
544938 50413 CVE-2011-2501 BID:48474  View
544939 50413 CVE-2011-2501 URL:http://www.securityfocus.com/bid/48474  View
544940 50413 CVE-2011-2501 SECUNIA:45046  View
544941 50413 CVE-2011-2501 URL:http://secunia.com/advisories/45046  View
544942 50413 CVE-2011-2501 SECUNIA:45405  View
544943 50413 CVE-2011-2501 URL:http://secunia.com/advisories/45405  View
544944 50413 CVE-2011-2501 SECUNIA:45415  View
544945 50413 CVE-2011-2501 URL:http://secunia.com/advisories/45415  View
544946 50413 CVE-2011-2501 SECUNIA:45460  View
544947 50413 CVE-2011-2501 URL:http://secunia.com/advisories/45460  View
544948 50413 CVE-2011-2501 SECUNIA:45486  View
544949 50413 CVE-2011-2501 URL:http://secunia.com/advisories/45486  View
544950 50413 CVE-2011-2501 SECUNIA:45492  View
544951 50413 CVE-2011-2501 URL:http://secunia.com/advisories/45492  View
544952 50413 CVE-2011-2501 SECUNIA:45289  View
544953 50413 CVE-2011-2501 URL:http://secunia.com/advisories/45289  View
544954 50413 CVE-2011-2501 SECUNIA:49660  View
544955 50413 CVE-2011-2501 URL:http://secunia.com/advisories/49660  View
544956 50413 CVE-2011-2501 XF:libpng-pngerror-dos(68517)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34480 JVNDB-2011-004722 phpMyAdmin の setup/lib/ConfigGenerator.class.php における静的コードインジェクションの脆弱性 phpMyAdmin の setup/lib/ConfigGenerator.class.php は、コメント終了区切り文字の存在を適切に制限しないため、静的コードインジェクション攻撃を誘発する脆弱性が存在します。 CVE-2011-2506 50413 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004722.html  View