Vulnerability CVE-2011-3026: Information

Description

Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.

Severity: MEDIUM (6.8)

Published: Feb. 17, 2012
Modified: April 16, 2020
Error type identifier: CWE-190

References to Advisories, Solutions, and Tools

Hyperlink
Resource
http://code.google.com/p/chromium/issues/detail?id=112822
  • Exploit
  • Vendor Advisory
http://googlechromereleases.blogspot.com/2012/02/chrome-stable-update.html
  • Release Notes
  • Vendor Advisory
49660
  • Not Applicable
GLSA-201206-15
  • Third Party Advisory
APPLE-SA-2012-09-19-1
  • Mailing List
  • Third Party Advisory
APPLE-SA-2012-09-19-2
  • Mailing List
  • Third Party Advisory
http://support.apple.com/kb/HT5501
  • Third Party Advisory
http://support.apple.com/kb/HT5503
  • Third Party Advisory
oval:org.mitre.oval:def:15032
  • Third Party Advisory
SUSE-SU-2012:0303
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2012:0297
  • Mailing List
  • Third Party Advisory
48110
  • Not Applicable
48016
  • Not Applicable
    1. Configuration 1

      cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
      End excliding
      17.0.963.56

      Configuration 2

      cpe:2.3:o:apple:mac_os_x:10.6.8:*:*:*:*:*:*:*

      cpe:2.3:o:apple:mac_os_x_server:10.6.8:*:*:*:*:*:*:*

      cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
      End excliding
      6.0

      cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
      Start including
      10.7.0
      End excliding
      10.7.5

      cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*
      Start including
      10.7.0
      End excliding
      10.7.5

      Configuration 3

      cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:*:*:*

      cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*

      cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:*:*:*

      cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:sp2:*:*

      cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:vmware:*:*