CVE:CVE-2011-3045
CNNVD:CNNVD-201203-257
libpng是一个可对PNG图形文件实现创建、读写等操作的PNG参考库。
libpng中存在基于堆的缓冲区溢出漏洞。攻击者可利用该漏洞导致使用受影响库的应用程序崩溃，还可能在受影响应用程序上下文中运行任意代码。
solution:Upgrade google chrome to a higher version than 17.0.963.83,and avoid the version (,17.0.963.83); Upgrade redhat gluster_storage to a higher version than 2.0,and avoid the version 2.0; Upgrade redhat storage to a higher version than 2.0,and avoid the version 2.0; Upgrade redhat storage_for_public_cloud to a higher version than 2.0,and avoid the version 2.0; Upgrade debian debian_linux to a higher version than 6.0,and avoid the version 6.0; Upgrade fedoraproject fedora to a higher version than 15,16,17,and avoid the version 15,16,17; Upgrade opensuse opensuse to a higher version than 12.1,and avoid the version 12.1; Upgrade redhat enterprise_linux to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.2,and avoid the version 6.2; Upgrade redhat enterprise_linux_server_eus to a higher version than 6.2,and avoid the version 6.2; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade libpng libpng to a higher version than 1.5.10,and avoid the version (,1.5.10)