Beveiligingsadvies

CVE-2011-2690

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-07-17 20:00:00
Laatst bijgewerkt 2024-08-06 23:08:23
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image.