NVD

Id
9429  
Name
CVE-2011-2692  
Description
The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted PNG image that triggers the reading of uninitialized memory.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-07-17  
Modified Date
2012-07-23  
Seq
2011-2692  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
53798 9429 CVE-2011-2692 http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=commit;h=61a2d8a2a7b03023e63eae9a3e64607aaaa6d339  View
53799 9429 CVE-2011-2692 APPLE-SA-2011-10-12-3  View
53800 9429 CVE-2011-2692 APPLE-SA-2012-05-09-1  View
53801 9429 CVE-2011-2692 FEDORA-2011-9336  View
53802 9429 CVE-2011-2692 GLSA-201206-15  View
53803 9429 CVE-2011-2692 http://sourceforge.net/mailarchive/forum.php?thread_name=003101cc2790%24fb5d6e80%24f2184b80%24%40acm.org&forum_name=png-mng-implement  View
53804 9429 CVE-2011-2692 http://support.apple.com/kb/HT5002  View
53805 9429 CVE-2011-2692 http://support.apple.com/kb/HT5281  View
53806 9429 CVE-2011-2692 DSA-2287  View
53807 9429 CVE-2011-2692 VU#819894  View
53808 9429 CVE-2011-2692 http://www.libpng.org/pub/png/libpng.html  View
53809 9429 CVE-2011-2692 MDVSA-2011:151  View
53810 9429 CVE-2011-2692 [oss-security] 20110713 Security issues fixed in libpng 1.5.4  View
53811 9429 CVE-2011-2692 RHSA-2011:1103  View
53812 9429 CVE-2011-2692 RHSA-2011:1104  View
53813 9429 CVE-2011-2692 RHSA-2011:1105  View
53814 9429 CVE-2011-2692 48618  View
53815 9429 CVE-2011-2692 USN-1175-1  View
53816 9429 CVE-2011-2692 libpng-png-file-dos(68536)  View
53817 9429 CVE-2011-2692 https://bugzilla.redhat.com/show_bug.cgi?id=720612  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34537 JVNDB-2011-004779 libpng の png_handle_sCAL 関数におけるサービス運用妨害 (DoS) の脆弱性 libpng の pngrutil.c の png_handle_sCAL 関数は、無効な sCAL チャンクを適切に処理しないため、サービス運用妨害 (メモリの破損およびアプリケーションクラッシュ) 状態となる、または詳細不明な影響を受ける脆弱性が存在します。 CVE-2011-2692 50599 CVE-2011-2692 9429 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004779.html 2011-07-17 2012-05-15 View