Read the docs
TI-2011-02667 Aliases CVE-2011-3026GHSA-9qqw-9qvw-hj9x

Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote…

Priority HIGH 68CWE-190Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Partial Red Hat: 15 fixed, 2 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-190 and the CVSS impact.

Summary

Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.

Why it matters now

EPSS 0.72853 99th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial Red Hat: 5 advisoriesRed Hat: 15 fixed, 2 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 11

CPEVersionsRoleVendor
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*before 17.0.963.56VulnerableGoogle
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*before 6.0VulnerableApple
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*10.7.0 to before 10.7.5VulnerableApple
cpe:2.3:o:apple:mac_os_x:10.6.8:*:*:*:*:*:*:*10.6.8VulnerableApple
cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*10.7.0 to before 10.7.5VulnerableApple
cpe:2.3:o:apple:mac_os_x_server:10.6.8:*:*:*:*:*:*:*10.6.8VulnerableApple
cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*11.4VulnerableopenSUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:*:*:*11 sp1VulnerableSUSE
cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:*:*:*11 sp1VulnerableSUSE
cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:sp2:*:*11 sp1VulnerableSUSE
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions before 17.0.963.56 Vulnerable ·Google
  • cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* Versions before 6.0 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* Versions 10.7.0 to before 10.7.5 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.6.8:*:*:*:*:*:*:* Versions 10.6.8 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:* Versions 10.7.0 to before 10.7.5 Vulnerable ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.6.8:*:*:*:*:*:*:* Versions 10.6.8 Vulnerable ·Apple
  • cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:* Versions 11.4 Vulnerable ·openSUSE
  • cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:*:*:* Versions 11 sp1 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:*:*:* Versions 11 sp1 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:sp2:*:* Versions 11 sp1 Vulnerable ·SUSE
Show 1 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:vmware:*:*11 sp1VulnerableSUSE
  • cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:vmware:*:* Versions 11 sp1 Vulnerable ·SUSE

Remediation

Red Hat 5 advisories

  • RHSA-2012:0317 Released 2012-02-20 · Red Hat rating Important
    libpng security update
    • RHEL Desktop Workstation (v. 5 client) libpng-2:1.2.10-15.el5_7, libpng-devel-2:1.2.10-15.el5_7, libpng-devel-2:1.2.10-15.el5_7.i386
    • Red Hat Enterprise Linux (v. 5 server) libpng-2:1.2.10-15.el5_7, libpng-2:1.2.10-15.el5_7.i386, libpng-2:1.2.10-15.el5_7.ia64 +5
    • Red Hat Enterprise Linux AS version 4 libpng-2:1.2.7-9.el4, libpng-2:1.2.7-9.el4.i386, libpng-2:1.2.7-9.el4.ia64 +13
    • Red Hat Enterprise Linux Desktop (v. 5 client) libpng-2:1.2.10-15.el5_7, libpng-2:1.2.10-15.el5_7.i386
    • Red Hat Enterprise Linux Desktop (v. 6) libpng-2:1.2.46-2.el6_2
    • Red Hat Enterprise Linux Desktop Optional (v. 6) libpng-2:1.2.46-2.el6_2, libpng-devel-2:1.2.46-2.el6_2, libpng-static-2:1.2.46-2.el6_2
    • Red Hat Enterprise Linux Desktop version 4 libpng-2:1.2.7-9.el4, libpng-2:1.2.7-9.el4.i386, libpng-devel-2:1.2.7-9.el4 +5
    • Red Hat Enterprise Linux ES version 4 libpng-2:1.2.7-9.el4, libpng-2:1.2.7-9.el4.i386, libpng-2:1.2.7-9.el4.ia64 +9
    • Red Hat Enterprise Linux HPC Node (v. 6) libpng-2:1.2.46-2.el6_2
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) libpng-2:1.2.46-2.el6_2, libpng-devel-2:1.2.46-2.el6_2, libpng-static-2:1.2.46-2.el6_2
    • Red Hat Enterprise Linux Server (v. 6) libpng-2:1.2.46-2.el6_2, libpng-2:1.2.46-2.el6_2.ppc, libpng-devel-2:1.2.46-2.el6_2 +1
    • Red Hat Enterprise Linux Server Optional (v. 6) libpng-2:1.2.46-2.el6_2, libpng-static-2:1.2.46-2.el6_2
    • Red Hat Enterprise Linux WS version 4 libpng-2:1.2.7-9.el4, libpng-2:1.2.7-9.el4.i386, libpng-2:1.2.7-9.el4.ia64 +9
    • Red Hat Enterprise Linux Workstation (v. 6) libpng-2:1.2.46-2.el6_2, libpng-devel-2:1.2.46-2.el6_2
    • Red Hat Enterprise Linux Workstation Optional (v. 6) libpng-2:1.2.46-2.el6_2, libpng-static-2:1.2.46-2.el6_2
  • RHSA-2012:0143 Released 2012-02-16 · Red Hat rating Critical
    xulrunner security update
    • RHEL Desktop Workstation (v. 5 client) xulrunner-1.9.2.26-2.el5_7, xulrunner-devel-1.9.2.26-2.el5_7, xulrunner-devel-1.9.2.26-2.el5_7.i386
    • Red Hat Enterprise Linux (v. 5 server) xulrunner-1.9.2.26-2.el5_7, xulrunner-1.9.2.26-2.el5_7.i386, xulrunner-1.9.2.26-2.el5_7.ia64 +5
    • Red Hat Enterprise Linux Desktop (v. 5 client) xulrunner-1.9.2.26-2.el5_7, xulrunner-1.9.2.26-2.el5_7.i386
    • Red Hat Enterprise Linux Desktop (v. 6) xulrunner-1.9.2.26-2.el6_2
    • Red Hat Enterprise Linux Desktop Optional (v. 6) xulrunner-1.9.2.26-2.el6_2, xulrunner-devel-1.9.2.26-2.el6_2
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) xulrunner-1.9.2.26-2.el6_2, xulrunner-devel-1.9.2.26-2.el6_2
    • Red Hat Enterprise Linux Server (v. 6) xulrunner-1.9.2.26-2.el6_2, xulrunner-1.9.2.26-2.el6_2.ppc
    • Red Hat Enterprise Linux Server Optional (v. 6) xulrunner-1.9.2.26-2.el6_2, xulrunner-devel-1.9.2.26-2.el6_2, xulrunner-devel-1.9.2.26-2.el6_2.ppc
    • Red Hat Enterprise Linux Workstation (v. 6) xulrunner-1.9.2.26-2.el6_2
    • Red Hat Enterprise Linux Workstation Optional (v. 6) xulrunner-1.9.2.26-2.el6_2, xulrunner-devel-1.9.2.26-2.el6_2
  • RHSA-2012:0140 Released 2012-02-16 · Red Hat rating Critical
    thunderbird security update
    • Red Hat Enterprise Linux Desktop (v. 6) thunderbird-3.1.18-2.el6_2
    • Red Hat Enterprise Linux Server Optional (v. 6) thunderbird-3.1.18-2.el6_2
    • Red Hat Enterprise Linux Workstation (v. 6) thunderbird-3.1.18-2.el6_2
Show 2 more Red Hat advisories
  • RHSA-2012:0142 Released 2012-02-16 · Red Hat rating Critical
    firefox security update
    • Red Hat Enterprise Linux AS version 4 firefox-3.6.26-3.el4, firefox-3.6.26-3.el4.i386, firefox-3.6.26-3.el4.ia64 +1
    • Red Hat Enterprise Linux Desktop version 4 firefox-3.6.26-3.el4, firefox-3.6.26-3.el4.i386
    • Red Hat Enterprise Linux ES version 4 firefox-3.6.26-3.el4, firefox-3.6.26-3.el4.i386, firefox-3.6.26-3.el4.ia64
    • Red Hat Enterprise Linux WS version 4 firefox-3.6.26-3.el4, firefox-3.6.26-3.el4.i386, firefox-3.6.26-3.el4.ia64
  • RHSA-2012:0141 Released 2012-02-16 · Red Hat rating Critical
    seamonkey security update
    • Red Hat Enterprise Linux AS version 4 seamonkey-1.0.9-79.el4, seamonkey-1.0.9-79.el4.i386, seamonkey-1.0.9-79.el4.ia64 +21
    • Red Hat Enterprise Linux Desktop version 4 seamonkey-1.0.9-79.el4, seamonkey-1.0.9-79.el4.i386, seamonkey-chat-1.0.9-79.el4 +9
    • Red Hat Enterprise Linux ES version 4 seamonkey-1.0.9-79.el4, seamonkey-1.0.9-79.el4.i386, seamonkey-1.0.9-79.el4.ia64 +15
    • Red Hat Enterprise Linux WS version 4 seamonkey-1.0.9-79.el4, seamonkey-1.0.9-79.el4.i386, seamonkey-1.0.9-79.el4.ia64 +15

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 4AffectedNo fix yet
Red Hat Enterprise Linux 5AffectedNo fix yet
RHEL Desktop Workstation (v. 5 client)Fixed RHSA-2012:0143, RHSA-2012:0317
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2012:0143, RHSA-2012:0317
Red Hat Enterprise Linux AS version 4Fixed RHSA-2012:0141, RHSA-2012:0142, RHSA-2012:0317
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2012:0143, RHSA-2012:0317
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2012:0140, RHSA-2012:0143, RHSA-2012:0317
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2012:0143, RHSA-2012:0317
Red Hat Enterprise Linux Desktop version 4Fixed RHSA-2012:0141, RHSA-2012:0142, RHSA-2012:0317
Red Hat Enterprise Linux ES version 4Fixed RHSA-2012:0141, RHSA-2012:0142, RHSA-2012:0317
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2012:0317
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2012:0143, RHSA-2012:0317
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2012:0143, RHSA-2012:0317
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2012:0140, RHSA-2012:0143, RHSA-2012:0317
Red Hat Enterprise Linux WS version 4Fixed RHSA-2012:0141, RHSA-2012:0142, RHSA-2012:0317
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2012:0140, RHSA-2012:0143, RHSA-2012:0317
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2012:0143, RHSA-2012:0317

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-3026
  2. 2026-10-03 Alias added: GHSA-9qqw-9qvw-hj9x

References

Exploit 1

Advisory 9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences