CVE-2011-2501 PUBLISHED CVSS 4.300000190734863 MEDIUM

The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.

EPSS 2.25% · 84.4th percentile

Risk Scores

CVSS v2.0
4.300000190734863
EPSS Score
2.25%
84.4th percentile

Affected Products

VendorProductVersions
debiandebian_linux5.0, 6.0
fedoraprojectfedora14
n/an/a*
libpnglibpng1.5.0, 1.4.0, 1.2.0
canonicalubuntu_linux11.04, 10.10, 8.04

Timeline

References

…and 5 more

Open in Interactive Console →