Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2006-3334
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2006-3334

Description:
Buffer overflow in the png_decompress_chunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors related to "chunk error processing," possibly involving the "chunk_name".

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/27468

SUSE
  http://www.novell.com/linux/security/advisories/2006_16_sr.html
  http://www.novell.com/linux/security/advisories/2006_28_sr.html

SAID
  Secunia Advisory: SA23335
  Secunia Advisory: SA20960
  Secunia Advisory: SA22957
  Secunia Advisory: SA22958
  Secunia Advisory: SA22956
  Secunia Advisory: SA29420
  Secunia Advisory: SA33137

MANDRIVA
  http://www.mandriva.com/security/advisories?name=MDKSA-2006:212
  http://www.mandriva.com/security/advisories?name=MDKSA-2006:213
  http://www.mandriva.com/security/advisories?name=MDKSA-2006:209
  http://www.mandriva.com/security/advisories?name=MDKSA-2006:211
  http://www.mandriva.com/security/advisories?name=MDKSA-2006:210

GENTOO
  http://security.gentoo.org/glsa/glsa-200607-06.xml
  http://security.gentoo.org/glsa/glsa-200812-15.xml

CONFIRM
  http://docs.info.apple.com/article.html?artnum=307562
  http://sourceforge.net/project/shownotes.php?group_id=5624&release_id=428123

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/440594/100/0/threaded

BID
  18698

APPLE
  http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html


Return to the previous page.