ubuntu · CVE-2011-3045

Quick triage

Priority: medium Published: 2012-03-20 00:00:00 UTC Updated: 2025-08-25 20:15:36 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2011-3045 medium priority: Ubuntu including 4 source packages (chromium-browser, firefox, libpng, thunderbird), 28 status rows across 7 suites (hardy, lucid, maverick, natty, oneiric, precise, upstream): not-affected 13, released 6, ignored 4, needs-triage 4, DNE 1.

Description:

Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.

cvelogic Threat Intelligence