CVE-2006-5793

2006-11-1700:00:00

ubuntu.com

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.031 Low

EPSS

Percentile

90.9%

JSON

The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng
1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which
allows context-dependent attackers to cause a denial of service (crash) via
malformed sPLT chunks that trigger an out-of-bounds read.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchlibpng< 1.2.8rel-5ubuntu0.2UNKNOWN
ubuntu6.10noarchlibpng< 1.2.8rel-5.1ubuntu0.2UNKNOWN
ubuntu7.04noarchlibpng< 1.2.15~beta5-1ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	libpng	< 1.2.8rel-5ubuntu0.2	UNKNOWN
ubuntu	6.10	noarch	libpng	< 1.2.8rel-5.1ubuntu0.2	UNKNOWN
ubuntu	7.04	noarch	libpng	< 1.2.15~beta5-1ubuntu1	UNKNOWN