CVE-2006-3334

Published: Jun 30, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the png_decompress_chunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors related to "chunk error processing," possibly involving the "chunk_name".

Affected (13)

Products: Greg Roelofs: Libpng

1 product

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Greg Roelofs Libpng	version ≤ 1.2.11
Greg Roelofs Libpng	Version 1.2.0
Greg Roelofs Libpng	Version 1.2.10
Greg Roelofs Libpng	Version 1.2.1
Greg Roelofs Libpng	Version 1.2.2
Greg Roelofs Libpng	Version 1.2.3
Greg Roelofs Libpng	Version 1.2.4
Greg Roelofs Libpng	Version 1.2.5
Greg Roelofs Libpng	Version 1.2.6
Greg Roelofs Libpng	Version 1.2.7
Greg Roelofs Libpng	Version 1.2.7rc1
Greg Roelofs Libpng	Version 1.2.8
Greg Roelofs Libpng	Version 1.2.9

References (50)

http://docs.info.apple.com/article.html?artnum=307562

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: cve@mitre.org

http://secunia.com/advisories/20960

Source: cve@mitre.org

http://secunia.com/advisories/22956

Source: cve@mitre.org

http://secunia.com/advisories/22957

Source: cve@mitre.org

http://secunia.com/advisories/22958

Source: cve@mitre.org

http://secunia.com/advisories/23335

Source: cve@mitre.org

http://secunia.com/advisories/29420

Source: cve@mitre.org

http://secunia.com/advisories/33137

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200607-06.xml

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200812-15.xml

Source: cve@mitre.org

http://sourceforge.net/project/shownotes.php?group_id=5624&release_id=428123

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:209

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:210

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:211

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:212

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:213

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2006_16_sr.html

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2006_28_sr.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/440594/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18698

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2585

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0924/references

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27468

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-517

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=307562

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20960

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22956

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22957

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22958

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/23335

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29420

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33137

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200607-06.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200812-15.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/project/shownotes.php?group_id=5624&release_id=428123

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:209

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:210

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:211

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:212

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:213

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2006_16_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2006_28_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/440594/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/18698

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/2585

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0924/references

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/27468

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-517

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.