Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-3005
HistoryJun 13, 2006 - 12:00 a.m.

CVE-2006-3005

2006-06-1300:00:00
ubuntu.com
ubuntu.com
9

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.005

Percentile

77.2%

The JPEG library in media-libs/jpeg before 6b-r7 on Gentoo Linux is built
without the -maxmem feature, which could allow context-dependent attackers
to cause a denial of service (memory exhaustion) via a crafted JPEG file
that exceeds the intended memory limits.

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.005

Percentile

77.2%