CVE-2011-3045: Integer Overflow
A type conversion flaw leading to an out-of-bounds heap buffer read was found in the way libpng, a library of functions for manipulation PNG image format files, performed expansion of certain iCCP, iTXt, and zTXt PNG image file chunks.
A remote attacker could provide a specially-crafted Portable Network Graphics (PNG) image file, which once opened in an application, linked against libpng, could lead to denial of service or in some cases, execution of arbitrary code with permission of the user running such an application.
Upstream patch: http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=commitdiff;h=a8c319a2b281af68f7ca0e2f9a28ca57b44ceb2b#patch3
Other sources
Integer signedness error in the pnginflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3045?
CVE-2011-3045 is rated as a high severity vulnerability due to its potential to allow remote attackers to exploit a type conversion flaw.
How do I fix CVE-2011-3045?
To fix CVE-2011-3045, update affected applications to the latest version available that addresses this vulnerability.
Which software is affected by CVE-2011-3045?
CVE-2011-3045 affects multiple versions of software including Google Chrome, various Red Hat and Fedora releases, and libpng.
What type of vulnerability is CVE-2011-3045?
CVE-2011-3045 is a type conversion flaw that leads to an out-of-bounds heap buffer read.
Can CVE-2011-3045 be exploited remotely?
Yes, CVE-2011-3045 can be exploited remotely if a user opens a specially crafted PNG image.