Beveiligingsadvies

CVE-2011-2501

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-07-17 20:00:00

Laatst bijgewerkt 2024-08-06 23:00:34

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.

← Alle CVE's bekijken Bekijk op cve.org ↗