CVE-2011-3045
High
Description
Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Google Chrome
PublishedMar 22, 2012
First seenMar 22, 2012
Weakness typeCWE-195CWE-195
How to fix
Update
- google chrome17.0.963.83 or later
- libpng libpng1.5.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| google chrome | v < 17.0.963.83 | 17.0.963.83 |
| redhat gluster_storage | 2.0 | — |
| redhat storage | 2.0 | — |
| redhat storage_for_public_cloud | 2.0 | — |
| debian debian_linux | 6.0 | — |
| fedoraproject fedora | 15, 16, 17 | — |
| opensuse opensuse | 12.1 | — |
| redhat enterprise_linux | 5.0, 6.0 | — |
| redhat enterprise_linux_desktop | 5.0, 6.0 | — |
| redhat enterprise_linux_server_aus | 6.2 | — |
| redhat enterprise_linux_server_eus | 6.2 | — |
| redhat enterprise_linux_workstation | 5.0, 6.0 | — |
| libpng libpng | v < 1.5.10 | 1.5.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.