漏洞信息详情
libpng pngrutil.c png_handle_sCAL函数缓冲区错误漏洞
- CNNVD编号:CNNVD-201107-189
- 危害等级: 高危
- CVE编号: CVE-2011-2692
- 漏洞类型: 缓冲区错误
- 发布时间: 2011-07-18
- 威胁类型: 远程
- 更新时间: 2020-08-07
- 厂 商: libpng
- 漏洞来源:
漏洞简介
libpng是一个可对PNG图形文件实现创建、读写等操作的PNG参考库。
libpng 1.0.55之前的1.0.x版本,1.2.45之前的1.2.x版本,1.4.8之前的1.4.x版本和1.5.4之前的1.5.x版本中的pngrutil.c的png_handle_sCAL函数不能正确处理无效的sCAL块。远程攻击者可借助触发读取未初始化内存的特制PNG图像导致拒绝服务(内存破坏和应用程序崩溃)。
漏洞公告
目前厂商已经发布了升级补丁以修复此安全问题,补丁获取链接:
http://www.libpng.org/pub/png/libpng.HTML
参考网址
来源:GENTOO
链接:http://security.gentoo.org/glsa/glsa-201206-15.xml
来源:CONFIRM
链接:http://www.libpng.org/pub/png/libpng.HTML
来源:CONFIRM
链接:http://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/kb/HT5281
来源:REDHAT
链接:http://www.redhat.com/support/errata/RHSA-2011-1103.HTML
来源:SECUNIA
链接:http://secunia.com/advisories/45415
来源:CONFIRM
链接:http://sourceforge.net/mailarchive/forum.php?thread_name=003101cc2790%24fb5d6e80%24f2184b80%24%40acm.org&forum_name=png-mng-implement
来源:SECUNIA
链接:http://secunia.com/advisories/49660
来源:SECUNIA
链接:http://secunia.com/advisories/45461
来源:SECUNIA
链接:http://secunia.com/advisories/45460
来源:CONFIRM
链接:http://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/kb/HT5002
来源:DEBIAN
链接:https://www.debian.org/security/2011/dsa-2287
来源:FEDORA
链接:http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.HTML
来源:UBUNTU
链接:http://www.ubuntu.com/usn/USN-1175-1
来源:SECUNIA
链接:http://secunia.com/advisories/45046
来源:SECUNIA
链接:http://secunia.com/advisories/45445
来源:XF
链接:https://exchange.xforce.ibmcloud.com/vulnerabilities/68536
来源:CERT-VN
链接:http://www.kb.cert.org/vuls/id/819894
来源:REDHAT
链接:http://www.redhat.com/support/errata/RHSA-2011-1104.HTML
来源:SECUNIA
链接:http://secunia.com/advisories/45405
来源:CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple
链接:http://lists.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/archives/security-announce/2012/May/msg00001.HTML
来源:MANDRIVA
链接:http://www.mandriva.com/security/advisories?name=MDVSA-2011:151
来源:REDHAT
链接:http://www.redhat.com/support/errata/RHSA-2011-1105.HTML
来源:MLIST
链接:http://www.openwall.com/lists/oss-security/2011/07/13/2
来源:CONFIRM
链接:https://bugzilla.redhat.com/show_bug.cgi?id=720612
来源:BID
链接:https://www.securityfocus.com/bid/48618
来源:CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple
链接:http://lists.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/archives/Security-announce/2011//Oct/msg00003.HTML
来源:SECUNIA
链接:http://secunia.com/advisories/45492
来源:CONFIRM
链接:http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=commit;h=61a2d8a2a7b03023e63eae9a3e64607aaaa6d339
受影响实体
- Libpng Libpng:1.5.0:Beta08
- Libpng Libpng:1.5.0:Beta09
- Libpng Libpng:1.5.0:Beta15
- Libpng Libpng:1.5.0:Beta14
- Libpng Libpng:1.5.0:Beta13
补丁
- libpng pngrutil.c png_handle_sCAL函数缓冲区错误漏洞的修复措施
评论