CVE-2011-2690
Fixed in a distro release EPSS 3%
Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image.
Products: libpng, fedoraproject fedora, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 5.0 | libpng | 1.2.27-2+lenny5 |
| Debian 6.0 | libpng | 1.2.44-1+squeeze1 |
| Red Hat Enterprise Linux 5 | libpng | 2:1.2.10-7.1.el5_7.5 |
| Red Hat Enterprise Linux 5 | libpng-debuginfo | 2:1.2.10-7.1.el5_7.5 |
| Red Hat Enterprise Linux 5 | libpng-devel | 2:1.2.10-7.1.el5_7.5 |
| Red Hat Enterprise Linux 6 | libpng | 2:1.2.46-1.el6_1 |
| Red Hat Enterprise Linux 6 | libpng-debuginfo | 2:1.2.46-1.el6_1 |
| Red Hat Enterprise Linux 6 | libpng-devel | 2:1.2.46-1.el6_1 |
| Red Hat Enterprise Linux 6 | libpng-static | 2:1.2.46-1.el6_1 |
| openSUSE Tumbleweed | libpng16 | 1.6.26-1.1 |