CVE-2011-3464

Published: Jul 22, 2012Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Off-by-one error in the png_formatted_warning function in pngerror.c in libpng 1.5.4 through 1.5.7 might allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified vectors, which trigger a stack-based buffer overflow.

Affected (14)

Products: Libpng: Libpng

Libpng

1 product

Libpng

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Libpng Libpng	Version 1.5.0 beta
Libpng Libpng	Version 1.5.1
Libpng Libpng	Version 1.5.1 beta
Libpng Libpng	Version 1.5.2
Libpng Libpng	Version 1.5.2 beta
Libpng Libpng	Version 1.5.3 beta
Libpng Libpng	Version 1.5.4
Libpng Libpng	Version 1.5.4 beta
Libpng Libpng	Version 1.5.5
Libpng Libpng	Version 1.5.5 beta
Libpng Libpng	Version 1.5.6
Libpng Libpng	Version 1.5.6 beta
Libpng Libpng	Version 1.5.7
Libpng Libpng	Version 1.5.7 beta