NVD

Id
9428  
Name
CVE-2011-2691  
Description
The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service (application crash) via a crafted PNG image.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-07-17  
Modified Date
2016-08-22  
Seq
2011-2691  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
53785 9428 CVE-2011-2691 http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=commit;h=9dad5e37aef295b4ef8dea39392b652deebc9261  View
53786 9428 CVE-2011-2691 APPLE-SA-2011-10-12-3  View
53787 9428 CVE-2011-2691 FEDORA-2011-9336  View
53788 9428 CVE-2011-2691 SSRT100852  View
53789 9428 CVE-2011-2691 GLSA-201206-15  View
53790 9428 CVE-2011-2691 http://support.apple.com/kb/HT5002  View
53791 9428 CVE-2011-2691 DSA-2287  View
53792 9428 CVE-2011-2691 http://www.libpng.org/pub/png/libpng.html  View
53793 9428 CVE-2011-2691 MDVSA-2011:151  View
53794 9428 CVE-2011-2691 [oss-security] 20110713 Security issues fixed in libpng 1.5.4  View
53795 9428 CVE-2011-2691 48660  View
53796 9428 CVE-2011-2691 libpng-pngdefaulterror-dos(68537)  View
53797 9428 CVE-2011-2691 https://bugzilla.redhat.com/show_bug.cgi?id=720608  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34536 JVNDB-2011-004778 libpng の png_err 関数におけるサービス運用妨害 (DoS) の脆弱性 libpng の pngerror.c の png_err 関数は、空の文字列の引数の代わりに NULL ポインタの引数を使用して関数呼び出しをするため、サービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2011-2691 50598 CVE-2011-2691 9428 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004778.html 2011-07-17 2012-04-17 View