CVE-2006-5793 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-5793
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-5793

Description: The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a denial of service (crash) via malformed sPLT chunks that trigger an out-of-bounds read.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/30290 UBUNTU http://www.ubuntu.com/usn/usn-383-1 TRUSTIX http://www.trustix.org/errata/2006/0065/ SUSE http://www.novell.com/linux/security/advisories/2006_28_sr.html ST 1017244 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.465035 SAID Secunia Advisory: SA22950 Secunia Advisory: SA22941 Secunia Advisory: SA22958 Secunia Advisory: SA22956 Secunia Advisory: SA22900 Secunia Advisory: SA22889 Secunia Advisory: SA22951 Secunia Advisory: SA23208 Secunia Advisory: SA23335 Secunia Advisory: SA25329 Secunia Advisory: SA25742 Secunia Advisory: SA29420 REDHAT http://www.redhat.com/support/errata/RHSA-2007-0356.html OPENPKG http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.036.html MISC http://bugs.gentoo.org/show_bug.cgi?id=154380 http://bugs.gentoo.org/attachment.cgi?id=101400&action=view http://www.coresecurity.com/?action=item&id=2148 MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2006:212 http://www.mandriva.com/security/advisories?name=MDKSA-2006:209 http://www.mandriva.com/security/advisories?name=MDKSA-2006:211 http://www.mandriva.com/security/advisories?name=MDKSA-2006:210 GENTOO http://security.gentoo.org/glsa/glsa-200611-09.xml CONFIRM http://docs.info.apple.com/article.html?artnum=307562 http://support.avaya.com/elmodocs2/security/ASA-2007-254.htm http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html http://sourceforge.net/project/shownotes.php?release_id=464278 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/489135/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/451874/100/200/threaded http://www.securityfocus.com/archive/1/archive/1/453484/100/100/threaded BID 21078 APPLE http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Return to the previous page.