Attacker Value

Unknown

(0 users assessed)

Exploitability

Unknown

(0 users assessed)

User Interaction

Unknown

Privileges Required

Unknown

Attack Vector

Unknown

0

CVE-2011-3045

Disclosure Date: March 22, 2012 •

MITRE ATT&CK

Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

None

Impact Score:

Unknown

Exploitability Score:

Unknown

Vector:

Attack Vector (AV):

Unknown

Attack Complexity (AC):

Unknown

Privileges Required (PR):

Unknown

User Interaction (UI):

Unknown

Scope (S):

Unknown

Confidentiality (C):

Unknown

Integrity (I):

Unknown

Availability (A):

Unknown

Vendors

debian,
fedoraproject,
google,
libpng,
opensuse,
redhat

Products

chrome,
debian linux 6.0,
enterprise linux 5.0,
enterprise linux 6.0,
enterprise linux desktop 5.0,
enterprise linux desktop 6.0,
enterprise linux server aus 6.2,
enterprise linux server eus 6.2,
enterprise linux workstation 5.0,
enterprise linux workstation 6.0,
fedora 15,
fedora 16,
fedora 17,
gluster storage 2.0,
libpng,
opensuse 12.1,
storage 2.0,
storage for public cloud 2.0

References

Canonical

CVE-2011-3045 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3045)

Advisory

FEDORA-2012-3545 (http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075981.html)

SECUNIA-49660 (http://secunia.com/advisories/49660)

http://rhn.redhat.com/errata/RHSA-2012-0407.html

http://www.mandriva.com/security/advisories?name=MDVSA-2012:033

FEDORA-2012-3507 (http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075424.html)

DSA-2439 (http://www.debian.org/security/2012/dsa-2439)

FEDORA-2012-3605 (http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075619.html)

SECUNIA-48320 (http://secunia.com/advisories/48320)

http://src.chromium.org/viewvc/chrome?view=rev&revision=125311

FEDORA-2012-3739 (http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076461.html)

FEDORA-2012-3536 (http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075987.html)

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00000.html

GLSA-201206-15 (http://security.gentoo.org/glsa/glsa-201206-15.xml)

http://rhn.redhat.com/errata/RHSA-2012-0488.html

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14763

https://bugzilla.redhat.com/show_bug.cgi?id=799000

SECUNIA-48485 (http://secunia.com/advisories/48485)

http://googlechromereleases.blogspot.com/2012/03/stable-channel-update_21.html

http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=commit;h=a8c319a2b281af68f7ca0e2f9a28ca57b44ceb2b

SECUNIA-48554 (http://secunia.com/advisories/48554)

http://lists.opensuse.org/opensuse-updates/2012-03/msg00051.html

http://code.google.com/p/chromium/issues/detail?id=116162

SECTRACK-1026823 (http://www.securitytracker.com/id?1026823)

FEDORA-2012-3705 (http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076731.html)

SECUNIA-48512 (http://secunia.com/advisories/48512)

Rapid7

Technical Analysis