Vulnerability in Greg_roelofs Libpng
CVE-2011-3328
The png_handle_cHRM function in pngrutil.c in libpng 1.5.4, when color-correction support is enabled, allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a malformed PNG image containing a…
EPSS: 0.038 (88.8th percentile) — read the EPSS interpretation.
Affected products
- Greg_roelofs Libpng — versions 1.5.4
- N/a — versions n/a
References
- cret@cert.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cret@cert.org (x_refsource_CONFIRM, Exploit)
- cret@cert.org (vendor-advisory, x_refsource_APPLE)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, Patch, third-party-advisory)
- cret@cert.org (vendor-advisory, x_refsource_APPLE)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (vendor-advisory, x_refsource_APPLE)