CVE-2011-3464 PUBLISHED CVSS 7.5 HIGH

Off-by-one error in the png_formatted_warning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified vectors, which trigger a stack-based buffer overflow.

EPSS 1.88% · 83.0th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
1.88%
83.0th percentile

Affected Products

VendorProductVersions
libpnglibpng1.5.7, 1.5.0, 1.5.1
n/an/an/a

Timeline

References

Open in Interactive Console →