CVE-2006-5793

libpng 1.0.6-1.2.12 - Denial of Service via Malformed sPLT Chunk Handling

Title source: llm
STIX 2.1

Description

The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a denial of service (crash) via malformed sPLT chunks that trigger an out-of-bounds read.

References (43)

Core 43
Core References
Vendor Advisory x_refsource_confirm
http://docs.info.apple.com/article.html?artnum=307562
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-824
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:209
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22941
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10324
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22956
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22958
Various Sources x_refsource_misc
http://www.coresecurity.com/?action=item&id=2148
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2006_28_sr.html
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0924/references
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/21078
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22951
Patch x_refsource_confirm
https://issues.rpath.com/browse/RPL-790
Patch, Vendor Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200611-09.xml
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/23335
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25329
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/4521
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29420
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1017244
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/453484/100/100/threaded
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:210
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/23208
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:212
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22889
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/451874/100/200/threaded
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0356.html
Vendor Advisory vendor-advisory x_refsource_openpkg
http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.036.html
Patch vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-383-1
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22950
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/30290
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22900
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:211
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/4568
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25742
Vendor Advisory vendor-advisory x_refsource_trustix
http://www.trustix.org/errata/2006/0065/
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/489135/100/0/threaded

Scores

EPSS 0.0173
EPSS Percentile 74.9%

Details

CWE
CWE-20
Status published
Products (18)
greg_roelofs/libpng 1.0.6
greg_roelofs/libpng 1.0.7
greg_roelofs/libpng 1.0.8
greg_roelofs/libpng 1.0.9
greg_roelofs/libpng 1.2.0
greg_roelofs/libpng 1.2.1
greg_roelofs/libpng 1.2.2
greg_roelofs/libpng 1.2.3
greg_roelofs/libpng 1.2.4
greg_roelofs/libpng 1.2.5
... and 8 more
Published Nov 17, 2006
Tracked Since Feb 18, 2026