CVE-2011-3048: Buffer Overflow
The pngsettext2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocation failure that is not properly handled, leading to a heap-based buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3048?
CVE-2011-3048 has been rated as medium severity due to its potential to cause a denial of service and execute arbitrary code remotely.
How do I fix CVE-2011-3048?
To fix CVE-2011-3048, upgrade libpng to version 1.0.59 or later, 1.2.49 or later, 1.4.11 or later, or 1.5.10 or later.
What types of vulnerabilities does CVE-2011-3048 exploit?
CVE-2011-3048 exploits vulnerabilities in the handling of crafted text chunks in PNG image files.
Which versions of libpng are affected by CVE-2011-3048?
CVE-2011-3048 affects libpng versions 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10.
What are the potential impacts of CVE-2011-3048?
The potential impacts of CVE-2011-3048 include application crashes and possible remote code execution.