NVD

Id
9427  
Name
CVE-2011-2690  
Description
Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-07-17  
Modified Date
2013-09-09  
Seq
2011-2690  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
53771 9427 CVE-2011-2690 APPLE-SA-2011-10-12-3  View
53772 9427 CVE-2011-2690 FEDORA-2011-9336  View
53773 9427 CVE-2011-2690 GLSA-201206-15  View
53774 9427 CVE-2011-2690 http://support.apple.com/kb/HT5002  View
53775 9427 CVE-2011-2690 DSA-2287  View
53776 9427 CVE-2011-2690 http://www.libpng.org/pub/png/libpng.html  View
53777 9427 CVE-2011-2690 MDVSA-2011:151  View
53778 9427 CVE-2011-2690 [oss-security] 20110713 Security issues fixed in libpng 1.5.4  View
53779 9427 CVE-2011-2690 RHSA-2011:1104  View
53780 9427 CVE-2011-2690 RHSA-2011:1105  View
53781 9427 CVE-2011-2690 48660  View
53782 9427 CVE-2011-2690 USN-1175-1  View
53783 9427 CVE-2011-2690 libpng-pngrgbtogray-bo(68538)  View
53784 9427 CVE-2011-2690 https://bugzilla.redhat.com/show_bug.cgi?id=720607  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31865 JVNDB-2011-002105 libpng におけるバッファオーバーフローの脆弱性 libpng には、png_set_expand 関数ではなく png_rgb_to_gray 関数を呼び出すアプリケーションで使用されるときに、バッファオーバーフローの脆弱性が存在します。 CVE-2011-2690 50597 CVE-2011-2690 9427 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002105.html 2011-07-07 2012-04-16 View