Medium severity6.5NVD Advisory· Published Jul 17, 2011· Updated Apr 29, 2026
CVE-2011-2501
CVE-2011-2501
Description
The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.
Affected products
8cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:14:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
23- slackware.com/security/viewer.phpnvdMailing ListPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2011/06/27/13nvdMailing ListPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2011/06/28/16nvdMailing ListPatchThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- sourceforge.net/mailarchive/forum.phpnvdExploitIssue TrackingThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2011-July/062720.htmlnvdMailing ListThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.htmlnvdMailing ListThird Party Advisory
- security.gentoo.org/glsa/glsa-201206-15.xmlnvdThird Party Advisory
- www.debian.org/security/2011/dsa-2287nvdThird Party Advisory
- www.securityfocus.com/bid/48474nvdThird Party AdvisoryVDB Entry
- www.ubuntu.com/usn/USN-1175-1nvdThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/68517nvdThird Party AdvisoryVDB Entry
- secunia.com/advisories/45046nvdBroken Link
- secunia.com/advisories/45289nvdBroken Link
- secunia.com/advisories/45405nvdBroken Link
- secunia.com/advisories/45415nvdBroken Link
- secunia.com/advisories/45460nvdBroken Link
- secunia.com/advisories/45486nvdBroken Link
- secunia.com/advisories/45492nvdBroken Link
- secunia.com/advisories/49660nvdBroken Link
- www.mandriva.com/security/advisoriesnvdBroken Link
- www.redhat.com/support/errata/RHSA-2011-1105.htmlnvdBroken Link
- libpng.git.sourceforge.net/git/gitweb.cginvd
News mentions
0No linked articles in our index yet.