CVE ID:	CVE-2011-2692
Description:	The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted PNG image that triggers the reading of uninitialized memory.
Test IDs:	1.3.6.1.4.1.25623.1.0.69943   1.3.6.1.4.1.25623.1.0.69949   1.3.6.1.4.1.25623.1.0.69952   1.3.6.1.4.1.25623.1.0.70021   1.3.6.1.4.1.25623.1.0.70040   1.3.6.1.4.1.25623.1.0.70271   1.3.6.1.4.1.25623.1.0.70164   1.3.6.1.4.1.25623.1.0.70165   1.3.6.1.4.1.25623.1.0.122114   1.3.6.1.4.1.25623.1.0.881259   1.3.6.1.4.1.25623.1.0.870461   1.3.6.1.4.1.25623.1.0.880957
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2692 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html http://lists.apple.com/archives/security-announce/2012/May/msg00001.html BugTraq ID: 48618 http://www.securityfocus.com/bid/48618 CERT/CC vulnerability note: VU#819894 http://www.kb.cert.org/vuls/id/819894 Debian Security Information: DSA-2287 (Google Search) http://www.debian.org/security/2011/dsa-2287 http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.html http://security.gentoo.org/glsa/glsa-201206-15.xml http://www.mandriva.com/security/advisories?name=MDVSA-2011:151 http://www.openwall.com/lists/oss-security/2011/07/13/2 RedHat Security Advisories: RHSA-2011:1103 http://www.redhat.com/support/errata/RHSA-2011-1103.html RedHat Security Advisories: RHSA-2011:1104 http://www.redhat.com/support/errata/RHSA-2011-1104.html RedHat Security Advisories: RHSA-2011:1105 http://www.redhat.com/support/errata/RHSA-2011-1105.html http://secunia.com/advisories/45046 http://secunia.com/advisories/45405 http://secunia.com/advisories/45415 http://secunia.com/advisories/45445 http://secunia.com/advisories/45460 http://secunia.com/advisories/45461 http://secunia.com/advisories/45492 http://secunia.com/advisories/49660 http://www.ubuntu.com/usn/USN-1175-1 XForce ISS Database: libpng-png-file-dos(68536) https://exchange.xforce.ibmcloud.com/vulnerabilities/68536