Vulnerability in Libpng
CVE-2011-3464
Off-by-one error in the png_formatted_warning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified vectors, which trigger a stack-based buffer overflow.
EPSS: 0.031 (86.5th percentile) — read the EPSS interpretation.
Affected products
- Libpng — versions 1.5.0, 1.5.1, 1.5.2
- N/a — versions n/a
Weakness classification (CWE)
References
- product-security@apple.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- product-security@apple.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- product-security@apple.com (vendor-advisory, x_refsource_GENTOO)
- product-security@apple.com (x_refsource_CONFIRM)