NVD

Id
64368  
Name
CVE-2006-5793  
Description
The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a denial of service (crash) via malformed sPLT chunks that trigger an out-of-bounds read.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:N/A:P)  
Pub Date
2016-12-20  
Published
2006-11-17  
Modified Date
2013-07-04  
Seq
2006-5793  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
335897 64368 CVE-2006-5793 http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html  View
335898 64368 CVE-2006-5793 http://bugs.gentoo.org/attachment.cgi?id=101400&action=view  View
335899 64368 CVE-2006-5793 http://bugs.gentoo.org/show_bug.cgi?id=154380  View
335900 64368 CVE-2006-5793 http://docs.info.apple.com/article.html?artnum=307562  View
335901 64368 CVE-2006-5793 APPLE-SA-2008-03-18  View
335902 64368 CVE-2006-5793 oval:org.mitre.oval:def:10324  View
335903 64368 CVE-2006-5793 GLSA-200611-09  View
335904 64368 CVE-2006-5793 1017244  View
335905 64368 CVE-2006-5793 SSA:2006-335-03  View
335906 64368 CVE-2006-5793 http://sourceforge.net/project/shownotes.php?release_id=464278  View
335907 64368 CVE-2006-5793 http://support.avaya.com/elmodocs2/security/ASA-2007-254.htm  View
335908 64368 CVE-2006-5793 http://www.coresecurity.com/?action=item&id=2148  View
335909 64368 CVE-2006-5793 MDKSA-2006:209  View
335910 64368 CVE-2006-5793 MDKSA-2006:210  View
335911 64368 CVE-2006-5793 MDKSA-2006:211  View
335912 64368 CVE-2006-5793 MDKSA-2006:212  View
335913 64368 CVE-2006-5793 SUSE-SR:2006:028  View
335914 64368 CVE-2006-5793 OpenPKG-SA-2006.036  View
335915 64368 CVE-2006-5793 RHSA-2007:0356  View
335916 64368 CVE-2006-5793 20061115 rPSA-2006-0211-1 libpng  View
335917 64368 CVE-2006-5793 20061204 rPSA-2006-0211-2 doxygen libpng  View
335918 64368 CVE-2006-5793 20080304 CORE-2008-0124: Multiple vulnerabilities in Google"s Android SDK  View
335919 64368 CVE-2006-5793 21078  View
335920 64368 CVE-2006-5793 2006-0065  View
335921 64368 CVE-2006-5793 USN-383-1  View
335922 64368 CVE-2006-5793 ADV-2006-4521  View
335923 64368 CVE-2006-5793 ADV-2006-4568  View
335924 64368 CVE-2006-5793 ADV-2008-0924  View
335925 64368 CVE-2006-5793 libpng-pngsetsplt-dos(30290)  View
335926 64368 CVE-2006-5793 https://issues.rpath.com/browse/RPL-790  View
335927 64368 CVE-2006-5793 https://issues.rpath.com/browse/RPL-824  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58696 JVNDB-2006-000961 libpng の png_set_sPLT() 関数におけるサービス運用妨害 (DoS) の脆弱性 PNG (Portable Network Graphics) 形式の画像処理ライブラリである libpng には、png_set_sPLT() 関数における sPLT チャンク処理コード部において、不正な PNG 画像の処理によりメモリアクセス違反が発生する問題があります。 CVE-2006-5793 21895 CVE-2006-5793 64368 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000961.html 2006-06-17 2009-04-03 View