CVE-2011-3328

概要

参考情報

• libpng.org/pub/png/libpng.html · Patch
• lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
• lists.apple.com/archives/security-announce/2012/May/msg00001.html
• lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
• sourceforge.net/tracker/index.php · Exploit
• support.apple.com/kb/HT5130
• support.apple.com/kb/HT5281
• support.apple.com/kb/HT5503
• kb.cert.org/vuls/id/477046 · Patch
• bugzilla.redhat.com/show_bug.cgi

libpng のその他の脆弱性

• CVE-2006-5793低 2.6The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data typ…
• CVE-2006-3334高 7.5Buffer overflow in the png_decompress_chunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a den…
• CVE-2006-0481中 5.0Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service (cr…
• CVE-2004-0599中 5.0Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display im…
• CVE-2004-0598中 5.0The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a cert…