CVE-2011-3026

Published: Feb 16, 2012Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.

Affected (11)

Products: Google: Chrome · Apple: Iphone Os, Mac Os X, Mac Os X Server · Opensuse: Opensuse · +1 more

Show all products

Google: Chrome · Apple: Iphone Os, Mac Os X, Mac Os X Server · Opensuse: Opensuse · Suse: Linux Enterprise Server, Suse Linux Enterprise Server

1 product

3 products

Mac Os X Server

1 product

2 products

Linux Enterprise Server

Suse Linux Enterprise Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Google Chrome	Before 17.0.963.56

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Before 6.0
Apple Mac Os X	From 10.7.0 to 10.7.5
Apple Mac Os X	Version 10.6.8
Apple Mac Os X Server	From 10.7.0 to 10.7.5
Apple Mac Os X Server	Version 10.6.8

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.4
Suse Linux Enterprise Server	Version 11 sp1
Suse Suse Linux Enterprise Server	Version 11 sp1
Suse Suse Linux Enterprise Server	Version 11 sp1
Suse Suse Linux Enterprise Server	Version 11 sp1

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (26)

http://code.google.com/p/chromium/issues/detail?id=112822

Source: cve@mitre.org

ExploitVendor Advisory

http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.html

Source: cve@mitre.org

Release NotesVendor Advisory

http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00020.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00023.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://secunia.com/advisories/48016

Source: cve@mitre.org

Not Applicable

http://secunia.com/advisories/48110

Source: cve@mitre.org

Not Applicable

http://secunia.com/advisories/49660

Source: cve@mitre.org

Not Applicable

http://security.gentoo.org/glsa/glsa-201206-15.xml

Source: cve@mitre.org

Third Party Advisory

http://support.apple.com/kb/HT5501

Source: cve@mitre.org

Third Party Advisory

http://support.apple.com/kb/HT5503

Source: cve@mitre.org

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15032

Source: cve@mitre.org

Third Party Advisory

http://code.google.com/p/chromium/issues/detail?id=112822

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.html

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00020.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00023.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://secunia.com/advisories/48016

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

http://secunia.com/advisories/48110

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

http://secunia.com/advisories/49660

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

http://security.gentoo.org/glsa/glsa-201206-15.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://support.apple.com/kb/HT5501

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://support.apple.com/kb/HT5503

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15032

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.