PT-2006-1082 · Libpng+1 · Libpng+1
Tavis Ormandy
·
Publicado
2006-11-17
·
Atualizado
2024-06-15
·
CVE-2006-5793
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
libpng versions 1.0.6 through 1.2.12
Description:
The issue is related to the sPLT chunk handling code in libpng, specifically the png set sPLT function in pngset.c, which uses a sizeof operator on the wrong data type. This allows attackers to cause a denial of service (crash) via malformed sPLT chunks that trigger an out-of-bounds read. The vulnerability can be exploited remotely and may lead to disruption of protected information. Additionally, it may allow an attacker to execute arbitrary code using a specially crafted PNG file.
Recommendations:
For libpng versions 1.0.6 through 1.2.12, update to version 1.2.13 or later to resolve the issue.
As a temporary workaround, consider restricting the use of libpng until a patch is available.
Avoid using libpng to process untrusted PNG files until the issue is resolved.
Correção
DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Red Hat
Libpng