Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-2690
HistoryJul 17, 2011 - 8:55 p.m.

CVE-2011-2690

2011-07-1720:55:01
CWE-120
[email protected]
web.nvd.nist.gov
1

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9

Confidence

High

EPSS

0.013

Percentile

85.7%

JSON

Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image.

Affected configurations

NVD
Node
libpnglibpngRange1.0.0–1.0.55
OR
libpnglibpngRange1.2.0–1.2.45
OR
libpnglibpngRange1.4.0–1.4.8
OR
libpnglibpngRange1.5.0–1.5.4
Node
fedoraprojectfedoraMatch14
Node
debiandebian_linuxMatch5.0
OR
debiandebian_linuxMatch6.0
Node
canonicalubuntu_linuxMatch8.04
OR
canonicalubuntu_linuxMatch10.04
OR
canonicalubuntu_linuxMatch10.10
OR
canonicalubuntu_linuxMatch11.04

References

Related

veracode 1
prion 1
osv 1
ubuntucve 1
cvelist 1
cve 1
nessus 28
openvas 45
centos 1
redhat 2
altlinux 3
fedora 12
securityvulns 4
ubuntu 1
oraclelinux 3
debian 1
gentoo 1
veracode
veracode
Arbitrary Code Execution
2020-04-10 01:03:15
prion
prion
Buffer overflow
2011-07-17 20:55:00
osv
osv
libpng - several vulnerabilities
2011-07-28 00:00:00
ubuntucve
ubuntucve
CVE-2011-2690
2011-07-17 00:00:00
cvelist
cvelist
CVE-2011-2690
2011-07-17 20:00:00
cve
cve
CVE-2011-2690
2011-07-17 20:55:01
nessus
nessus
Oracle Linux 5 : libpng (ELSA-2011-1104)
2013-07-12 00:00:00
Fedora 14 : mingw32-libpng-1.4.8-1.fc14 (2011-10954)
2011-08-29 00:00:00
CentOS 5 : libpng (CESA-2011:1104)
2011-09-23 00:00:00
openvas
openvas
CentOS Update for libpng CESA-2011:1104 centos5 x86_64
2012-07-30 00:00:00
CentOS Update for libpng CESA-2011:1104 centos5 i386
2011-09-23 00:00:00
CentOS Update for libpng CESA-2011:1104 centos5 i386
2011-09-23 00:00:00
centos
centos
libpng security update
2011-09-03 18:50:49
redhat
redhat
(RHSA-2011:1104) Moderate: libpng security update
2011-07-28 00:00:00
(RHSA-2011:1105) Moderate: libpng security update
2011-07-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package libpng version 1.2.46-alt0.M50P.1
2011-12-05 00:00:00
Security fix for the ALT Linux 5 package libpng version 1.2.46-alt1
2011-07-13 00:00:00
Security fix for the ALT Linux 6 package libpng version 1.2.46-alt1
2011-07-13 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: mingw32-libpng-1.4.8-1.fc15
2011-08-26 18:56:16
[SECURITY] Fedora 14 Update: mingw32-libpng-1.4.8-1.fc14
2011-08-26 19:00:14
[SECURITY] Fedora 15 Update: libpng10-1.0.57-1.fc15
2012-02-28 09:59:31
securityvulns
securityvulns
libpng library multiple security vulnerabilities
2011-07-26 00:00:00
[USN-1175-1] libpng vulnerabilities
2011-07-26 00:00:00
APPLE-SA-2011-10-12-3 OS X Lion v10.7.2 and Security Update 2011-006
2011-10-16 00:00:00
ubuntu
ubuntu
libpng vulnerabilities
2011-07-26 00:00:00
oraclelinux
oraclelinux
libpng security update
2011-08-01 00:00:00
libpng security update
2011-07-28 00:00:00
libpng security update
2011-07-28 00:00:00
debian
debian
[SECURITY] [DSA 2287-1] libpng security update
2011-07-28 16:23:46
gentoo
gentoo
libpng: Multiple vulnerabilities
2012-06-22 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9

Confidence

High

EPSS

0.013

Percentile

85.7%

JSON
Related for NVD:CVE-2011-2690
veracode1prion1osv1ubuntucve1cvelist1cve1nessus28openvas45centos1redhat2altlinux3fedora12securityvulns4ubuntu1oraclelinux3debian1gentoo1