| Package | Affected versions | Patched versions |
|---|---|---|
| chrome | < 17.0.963.83 | 17.0.963.83 |
| libpng | < 1.5.10 | 1.5.10 |
| gluster storage | = 2.0 | |
| storage | = 2.0 | |
| storage for public cloud | = 2.0 |
Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free