Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-3464

Опубликовано: 22 июл. 2012
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

Off-by-one error in the png_formatted_warning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified vectors, which trigger a stack-based buffer overflow.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:libpng:libpng:1.5.0:beta:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.5.1:beta:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.5.2:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.5.2:beta:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.5.3:beta:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.5.4:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.5.4:beta:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.5.5:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.5.5:beta:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.5.6:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.5.6:beta:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.5.7:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.5.7:beta:*:*:*:*:*:*

EPSS

Процентиль: 83%
0.01879
Низкий

7.5 High

CVSS2

Дефекты

CWE-189

Связанные уязвимости

ubuntu
больше 13 лет назад

Off-by-one error in the png_formatted_warning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified vectors, which trigger a stack-based buffer overflow.

redhat
около 14 лет назад

Off-by-one error in the png_formatted_warning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified vectors, which trigger a stack-based buffer overflow.

debian
больше 13 лет назад

Off-by-one error in the png_formatted_warning function in pngerror.c i ...

github
больше 3 лет назад

Off-by-one error in the png_formatted_warning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified vectors, which trigger a stack-based buffer overflow.

fstec
больше 13 лет назад

Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 83%
0.01879
Низкий

7.5 High

CVSS2

Дефекты

CWE-189