CVE-2006-5793: Input Validation
Published Nov 17, 2006
·Updated
The sPLT chunk handling code (pngsetsPLT function in pngset.c) in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a denial of service (crash) via malformed sPLT chunks that trigger an out-of-bounds read.
Affected Software
18 affected components
Greg Roelofs Libpng=1.2.10
Greg Roelofs Libpng=1.2.0
Greg Roelofs Libpng=1.2.12
Greg Roelofs Libpng=1.2.7rc1
Greg Roelofs Libpng=1.2.2
Greg Roelofs Libpng=1.2.6
Greg Roelofs Libpng=1.2.11
Greg Roelofs Libpng=1.2.9
Greg Roelofs Libpng=1.2.7
Greg Roelofs Libpng=1.2.3
Greg Roelofs Libpng=1.2.1
Greg Roelofs Libpng=1.2.4
Greg Roelofs Libpng=1.0.9
Greg Roelofs Libpng=1.0.7
Greg Roelofs Libpng=1.0.8
Greg Roelofs Libpng=1.2.8
Greg Roelofs Libpng=1.0.6
Greg Roelofs Libpng=1.2.5
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Nov 17, 2006
CVE Published
11:07 PM
Data Sourced
via NVD·11:07 PM
RemedyDescriptionSeverityWeaknessAffected Software
Nov 18, 2006
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-5793?
CVE-2006-5793 has a medium severity rating due to its potential to cause denial of service through crashes.
2
How do I fix CVE-2006-5793?
To fix CVE-2006-5793, upgrade to libpng version 1.2.13 or later, as these versions address the vulnerability.
3
What software is affected by CVE-2006-5793?
CVE-2006-5793 affects libpng versions 1.0.6 through 1.2.12.
4
Can CVE-2006-5793 be exploited remotely?
Yes, CVE-2006-5793 can be exploited remotely via malformed sPLT chunks.
5
What type of vulnerability is CVE-2006-5793?
CVE-2006-5793 is a denial of service vulnerability caused by out-of-bounds reads in the png_set_sPLT function.