CVE-2011-2691 in libpnginfo

Summary

The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service (application crash) via a crafted PNG image.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

07/11/2011

Disclosure

07/17/2011

CPE

ready

CVSS

5.9

EPSS

0.07693

Activities

Very Low

Sources

Do you know our Splunk app?

Download it now for free!