CVE-2011-3026
NoneCVSS
—
EPSS
72.9%
Published
Feb 16, 2012
CISA due date
—
The record
Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:6.0 | libpng | 0 | 1.2.44-1+squeeze2 |
| Red Hat:enterprise_linux:4::as | firefox | 0 | 0:3.6.26-3.el4 |
| Red Hat:enterprise_linux:4::as | firefox-debuginfo | 0 | 0:3.6.26-3.el4 |
| Red Hat:enterprise_linux:4::as | libpng | 0 | 2:1.2.7-9.el4 |
| Red Hat:enterprise_linux:4::as | libpng-debuginfo | 0 | 2:1.2.7-9.el4 |
| Red Hat:enterprise_linux:4::as | libpng-devel | 0 | 2:1.2.7-9.el4 |
| Red Hat:enterprise_linux:4::as | libpng10 | 0 | 0:1.0.16-10.el4 |
| Red Hat:enterprise_linux:4::as | libpng10-debuginfo | 0 | 0:1.0.16-10.el4 |
| Red Hat:enterprise_linux:4::as | libpng10-devel | 0 | 0:1.0.16-10.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-chat | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-debuginfo | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-devel | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-dom-inspector | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-js-debugger | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-mail | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox | 0 | 0:3.6.26-3.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox-debuginfo | 0 | 0:3.6.26-3.el4 |
| Red Hat:enterprise_linux:4::desktop | libpng | 0 | 2:1.2.7-9.el4 |
| Red Hat:enterprise_linux:4::desktop | libpng-debuginfo | 0 | 2:1.2.7-9.el4 |
| Red Hat:enterprise_linux:4::desktop | libpng-devel | 0 | 2:1.2.7-9.el4 |
| Red Hat:enterprise_linux:4::desktop | libpng10 | 0 | 0:1.0.16-10.el4 |
| Red Hat:enterprise_linux:4::desktop | libpng10-debuginfo | 0 | 0:1.0.16-10.el4 |
| Red Hat:enterprise_linux:4::desktop | libpng10-devel | 0 | 0:1.0.16-10.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-chat | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-debuginfo | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-devel | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-dom-inspector | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-js-debugger | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-mail | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::es | firefox | 0 | 0:3.6.26-3.el4 |
| Red Hat:enterprise_linux:4::es | firefox-debuginfo | 0 | 0:3.6.26-3.el4 |
| Red Hat:enterprise_linux:4::es | libpng | 0 | 2:1.2.7-9.el4 |
| Red Hat:enterprise_linux:4::es | libpng-debuginfo | 0 | 2:1.2.7-9.el4 |
| Red Hat:enterprise_linux:4::es | libpng-devel | 0 | 2:1.2.7-9.el4 |
| Red Hat:enterprise_linux:4::es | libpng10 | 0 | 0:1.0.16-10.el4 |
| Red Hat:enterprise_linux:4::es | libpng10-debuginfo | 0 | 0:1.0.16-10.el4 |
| Red Hat:enterprise_linux:4::es | libpng10-devel | 0 | 0:1.0.16-10.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-chat | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-debuginfo | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-devel | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-dom-inspector | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-js-debugger | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-mail | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::ws | firefox | 0 | 0:3.6.26-3.el4 |
| Red Hat:enterprise_linux:4::ws | firefox-debuginfo | 0 | 0:3.6.26-3.el4 |
| Red Hat:enterprise_linux:4::ws | libpng | 0 | 2:1.2.7-9.el4 |
| Red Hat:enterprise_linux:4::ws | libpng-debuginfo | 0 | 2:1.2.7-9.el4 |
| Red Hat:enterprise_linux:4::ws | libpng-devel | 0 | 2:1.2.7-9.el4 |
| Red Hat:enterprise_linux:4::ws | libpng10 | 0 | 0:1.0.16-10.el4 |
| Red Hat:enterprise_linux:4::ws | libpng10-debuginfo | 0 | 0:1.0.16-10.el4 |
| Red Hat:enterprise_linux:4::ws | libpng10-devel | 0 | 0:1.0.16-10.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-chat | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-debuginfo | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-devel | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-dom-inspector | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-js-debugger | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-mail | 0 | 0:1.0.9-79.el4 |
| Red Hat:enterprise_linux:5::client | libpng | 0 | 2:1.2.10-15.el5_7 |
| Red Hat:enterprise_linux:5::client | libpng-debuginfo | 0 | 2:1.2.10-15.el5_7 |
| Red Hat:enterprise_linux:5::client | libpng-devel | 0 | 2:1.2.10-15.el5_7 |
| Red Hat:enterprise_linux:5::client | xulrunner | 0 | 0:1.9.2.26-2.el5_7 |
| Red Hat:enterprise_linux:5::client | xulrunner-debuginfo | 0 | 0:1.9.2.26-2.el5_7 |
| Red Hat:enterprise_linux:5::client | xulrunner-devel | 0 | 0:1.9.2.26-2.el5_7 |
| Red Hat:enterprise_linux:5::client_workstation | libpng | 0 | 2:1.2.10-15.el5_7 |
| Red Hat:enterprise_linux:5::client_workstation | libpng-debuginfo | 0 | 2:1.2.10-15.el5_7 |
| Red Hat:enterprise_linux:5::client_workstation | libpng-devel | 0 | 2:1.2.10-15.el5_7 |
| Red Hat:enterprise_linux:5::client_workstation | xulrunner | 0 | 0:1.9.2.26-2.el5_7 |
| Red Hat:enterprise_linux:5::client_workstation | xulrunner-debuginfo | 0 | 0:1.9.2.26-2.el5_7 |
| Red Hat:enterprise_linux:5::client_workstation | xulrunner-devel | 0 | 0:1.9.2.26-2.el5_7 |
| Red Hat:enterprise_linux:5::server | libpng | 0 | 2:1.2.10-15.el5_7 |
| Red Hat:enterprise_linux:5::server | libpng-debuginfo | 0 | 2:1.2.10-15.el5_7 |
| Red Hat:enterprise_linux:5::server | libpng-devel | 0 | 2:1.2.10-15.el5_7 |
| Red Hat:enterprise_linux:5::server | xulrunner | 0 | 0:1.9.2.26-2.el5_7 |
| Red Hat:enterprise_linux:5::server | xulrunner-debuginfo | 0 | 0:1.9.2.26-2.el5_7 |
| Red Hat:enterprise_linux:5::server | xulrunner-devel | 0 | 0:1.9.2.26-2.el5_7 |
| Red Hat:enterprise_linux:6::client | libpng | 0 | 2:1.2.46-2.el6_2 |
| Red Hat:enterprise_linux:6::client | libpng-debuginfo | 0 | 2:1.2.46-2.el6_2 |
| Red Hat:enterprise_linux:6::client | libpng-devel | 0 | 2:1.2.46-2.el6_2 |
| Red Hat:enterprise_linux:6::client | libpng-static | 0 | 2:1.2.46-2.el6_2 |
| Red Hat:enterprise_linux:6::client | thunderbird | 0 | 0:3.1.18-2.el6_2 |
| Red Hat:enterprise_linux:6::client | thunderbird-debuginfo | 0 | 0:3.1.18-2.el6_2 |
| Red Hat:enterprise_linux:6::client | xulrunner | 0 | 0:1.9.2.26-2.el6_2 |
| Red Hat:enterprise_linux:6::client | xulrunner-debuginfo | 0 | 0:1.9.2.26-2.el6_2 |
| Red Hat:enterprise_linux:6::client | xulrunner-devel | 0 | 0:1.9.2.26-2.el6_2 |
| Red Hat:enterprise_linux:6::computenode | libpng | 0 | 2:1.2.46-2.el6_2 |
| Red Hat:enterprise_linux:6::computenode | libpng-debuginfo | 0 | 2:1.2.46-2.el6_2 |
| Red Hat:enterprise_linux:6::computenode | libpng-devel | 0 | 2:1.2.46-2.el6_2 |
| Red Hat:enterprise_linux:6::computenode | libpng-static | 0 | 2:1.2.46-2.el6_2 |
| Red Hat:enterprise_linux:6::computenode | xulrunner | 0 | 0:1.9.2.26-2.el6_2 |
| Red Hat:enterprise_linux:6::computenode | xulrunner-debuginfo | 0 | 0:1.9.2.26-2.el6_2 |
| Red Hat:enterprise_linux:6::computenode | xulrunner-devel | 0 | 0:1.9.2.26-2.el6_2 |
| Red Hat:enterprise_linux:6::server | libpng | 0 | 2:1.2.46-2.el6_2 |
| Red Hat:enterprise_linux:6::server | libpng-debuginfo | 0 | 2:1.2.46-2.el6_2 |
| Red Hat:enterprise_linux:6::server | libpng-devel | 0 | 2:1.2.46-2.el6_2 |
| Red Hat:enterprise_linux:6::server | libpng-static | 0 | 2:1.2.46-2.el6_2 |
| Red Hat:enterprise_linux:6::server | thunderbird | 0 | 0:3.1.18-2.el6_2 |
| Red Hat:enterprise_linux:6::server | thunderbird-debuginfo | 0 | 0:3.1.18-2.el6_2 |
| Red Hat:enterprise_linux:6::server | xulrunner | 0 | 0:1.9.2.26-2.el6_2 |
| Red Hat:enterprise_linux:6::server | xulrunner-debuginfo | 0 | 0:1.9.2.26-2.el6_2 |
| Red Hat:enterprise_linux:6::server | xulrunner-devel | 0 | 0:1.9.2.26-2.el6_2 |
| Red Hat:enterprise_linux:6::workstation | libpng | 0 | 2:1.2.46-2.el6_2 |
| Red Hat:enterprise_linux:6::workstation | libpng-debuginfo | 0 | 2:1.2.46-2.el6_2 |
| Red Hat:enterprise_linux:6::workstation | libpng-devel | 0 | 2:1.2.46-2.el6_2 |
| Red Hat:enterprise_linux:6::workstation | libpng-static | 0 | 2:1.2.46-2.el6_2 |
| Red Hat:enterprise_linux:6::workstation | thunderbird | 0 | 0:3.1.18-2.el6_2 |
| Red Hat:enterprise_linux:6::workstation | thunderbird-debuginfo | 0 | 0:3.1.18-2.el6_2 |
| Red Hat:enterprise_linux:6::workstation | xulrunner | 0 | 0:1.9.2.26-2.el6_2 |
| Red Hat:enterprise_linux:6::workstation | xulrunner-debuginfo | 0 | 0:1.9.2.26-2.el6_2 |
| Red Hat:enterprise_linux:6::workstation | xulrunner-devel | 0 | 0:1.9.2.26-2.el6_2 |
| openSUSE:Tumbleweed | MozillaFirefox | 0 | 50.1.0-1.1 |
| openSUSE:Tumbleweed | MozillaThunderbird | 0 | 45.5.1-1.1 |
| openSUSE:Tumbleweed | chromium | 0 | 113.0.5672.92-1.1 |
| openSUSE:Tumbleweed | chromium | 0 | 55.0.2883.75-3.1 |
| openSUSE:Tumbleweed | firefox-esr | 0 | 128.5.1-1.1 |
Related vulnerabilities
- CVE-2015-8472 Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x… Also affects libpng
- CVE-2015-8126 Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in… Also affects libpng
- CVE-2012-3425 The png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before… Also affects libpng
- CVE-2011-3659 Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0… Also affects firefox
- CVE-2011-2371 Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x… Also affects firefox
- CVE-2011-0073 Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does… Also affects firefox
- CVE-2011-0065 Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17… Also affects firefox
- CVE-2010-3765 Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before… Also affects firefox