High severity · published Jul 17, 2011
CVE-2011-2692
The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL…
8.8
CVSS
4.2%
EPSS
No
On KEV
Description
The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted PNG image that triggers the reading of uninitialized memory.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
5.0; 6.0 · source: NVD
FE
Fedora · Fedoraproject
14 · source: NVD
LI
Libpng · Libpng
1.0.0 before 1.0.55; 1.2.0 before 1.2.45; 1.4.0 before 1.4.8; 1.5.0 before 1.5.4 · source: NVD
UL
Ubuntu Linux · Canonical
8.04; 10.04; 10.10; 11.04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2692
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2692
libpng.git.sourceforge.net
http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commit%3Bh=61a2d8a2a7b03023e63eae9a3e64607aaaa6d339
Mailing List
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
Mailing List
http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
Mailing List
http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.html
Broken Link
http://secunia.com/advisories/45046
Broken Link
http://secunia.com/advisories/45405
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation