[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247768

 
 

909

 
 

194555

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2006-7244Date: (C)2011-08-31   (M)2023-12-22


Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL
  
Reference:
http://www.openwall.com/lists/oss-security/2011/03/22/7
http://www.openwall.com/lists/oss-security/2011/03/28/6
http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=948ee23a2a400672b1751cfc646a7467741e9b2e#patch18
https://bugs.gentoo.org/159216?id=159216

CPE    59
cpe:/a:libpng:libpng:1.0.13
cpe:/a:libpng:libpng:1.0.12
cpe:/a:libpng:libpng:1.0.11
cpe:/a:libpng:libpng:1.0.10
...
CWE    1
CWE-399

© SecPod Technologies