CVE-2006-7244: Medium severity libpng libpng vulnerability
Published Aug 31, 2011
·Updated
Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length.
Affected Software
176 affected components
libpng LIBPNG=1.0.37
libpng LIBPNG=1.2.14
libpng LIBPNG=1.2.11-beta3
libpng LIBPNG=1.0.6-e
libpng LIBPNG=1.0.23-rc3
libpng LIBPNG=1.0.41
libpng LIBPNG=1.0.9-beta1
libpng LIBPNG=1.0.15-rc1
libpng LIBPNG=1.2.0-beta4
libpng LIBPNG=1.0.10-beta1
libpng LIBPNG=1.2.10-beta3
libpng LIBPNG=1.0.7-beta13
libpng LIBPNG=1.0.9-beta8
libpng LIBPNG=1.0.46
libpng LIBPNG=1.0.17-rc1
libpng LIBPNG=1.0.29-rc3
libpng LIBPNG=1.2.1-rc1
libpng LIBPNG=1.0.27-rc5
libpng LIBPNG=1.0.6-a
libpng LIBPNG=1.0.6-d
libpng LIBPNG=1.2.0-beta5
libpng LIBPNG=1.0.7-beta15
libpng LIBPNG=1.0.1
libpng LIBPNG=1.0.8
libpng LIBPNG=1.0.9-beta2
libpng LIBPNG=1.2.1-beta2
libpng LIBPNG=1.0.12-rc1
libpng LIBPNG=1.0.29-rc1
libpng LIBPNG=1.0.23-rc5
libpng LIBPNG=1.0.31-rc01
libpng LIBPNG=1.2.1-beta3
libpng LIBPNG=1.0.14
libpng LIBPNG=1.0.6-h
libpng LIBPNG=1.0.27-rc1
libpng LIBPNG=1.0.28-rc5
libpng LIBPNG=1.0.17
libpng LIBPNG=1.0.35
libpng LIBPNG=1.2.10-beta6
libpng LIBPNG=1.2.0
libpng LIBPNG=1.0.52
libpng LIBPNG=1.2.10-beta1
libpng LIBPNG=1.0.28-rc3
libpng LIBPNG=1.0.27
libpng LIBPNG=1.0.11-rc1
libpng LIBPNG=1.0.22
libpng LIBPNG=1.0.11
libpng LIBPNG=1.2.10-rc1
libpng LIBPNG=1.0.20
libpng LIBPNG=1.0.11-beta2
libpng LIBPNG=1.0.9
libpng LIBPNG=1.0.13
libpng LIBPNG=1.0.44
libpng LIBPNG=1.0.29-rc2
libpng LIBPNG=1.0.23-rc2
libpng LIBPNG=1.2.11-rc2
libpng LIBPNG=1.0.6
libpng LIBPNG=1.0.28-rc2
libpng LIBPNG=1.0.7-rc1
libpng LIBPNG=1.0.32
libpng LIBPNG=1.2.0-rc1
libpng LIBPNG=1.0.50
libpng LIBPNG=1.0.7-beta12
libpng LIBPNG=1.2.13-rc1
libpng LIBPNG=1.0.34
libpng LIBPNG=1.0.6-g
libpng LIBPNG=1.0.25
libpng LIBPNG=1.0.25-rc1
libpng LIBPNG=1.2.13-beta1
libpng LIBPNG=1.0.21
libpng LIBPNG=1.0.7-beta16
libpng LIBPNG=1.2.10
libpng LIBPNG=1.0.43
libpng LIBPNG=1.0.38
libpng LIBPNG=1.0.3
libpng LIBPNG=1.2.11-rc1
libpng LIBPNG=1.0.40
libpng LIBPNG=1.0.11-beta1
libpng LIBPNG=1.0.51
libpng LIBPNG=1.0.24-rc1
libpng LIBPNG=1.0.11-beta3
libpng LIBPNG=1.0.18
libpng LIBPNG=1.0.9-rc1
libpng LIBPNG=1.0.8-beta2
libpng LIBPNG=1.2.15-beta1
libpng LIBPNG=1.0.19-rc5
libpng LIBPNG=1.2.11-beta2
libpng LIBPNG=1.0.9-beta9
libpng LIBPNG=1.0.54
libpng LIBPNG=1.0.8-beta4
libpng LIBPNG=1.0.28-rc4
libpng LIBPNG=1.0.19-rc2
libpng LIBPNG=1.0.19-rc3
libpng LIBPNG=1.0.7
libpng LIBPNG=1.0.16
libpng LIBPNG=1.2.14-beta2
libpng LIBPNG=1.0.9-beta6
libpng LIBPNG=1.0.2
libpng LIBPNG=1.0.21-rc1
libpng LIBPNG=1.2.11-rc5
libpng LIBPNG=1.0.10-rc1
libpng LIBPNG=1.2.1-rc2
libpng LIBPNG=1.2.15
libpng LIBPNG=1.0.5
libpng LIBPNG=1.0.9-beta3
libpng LIBPNG=1.2.1
libpng LIBPNG=1.2.13
libpng LIBPNG=1.0.6-f
libpng LIBPNG=1.0.8-rc1
libpng LIBPNG=1.2.1-beta4
libpng LIBPNG<=1.2.15
libpng LIBPNG=1.0.29
libpng LIBPNG=1.2.14-beta1
libpng LIBPNG=1.0.27-rc4
libpng LIBPNG=1.0.39
libpng LIBPNG=1.0.27-rc6
libpng LIBPNG=1.0.42
libpng LIBPNG=1.0.25-rc2
libpng LIBPNG=1.2.10-beta4
libpng LIBPNG=1.2.0-beta1
libpng LIBPNG=1.0.7-beta11
libpng LIBPNG=1.0.6-i
libpng LIBPNG=1.0.6-j
libpng LIBPNG=1.0.24
libpng LIBPNG=1.0.12
libpng LIBPNG=1.2.11-beta4
libpng LIBPNG=1.2.10-beta2
libpng LIBPNG=1.0.15
libpng LIBPNG=1.2.11
libpng LIBPNG=1.2.13-rc2
libpng LIBPNG=1.2.14-rc1
libpng LIBPNG=1.0.15-rc2
libpng LIBPNG=1.0.23-rc4
libpng LIBPNG=1.0.15-rc3
libpng LIBPNG=1.0.19
libpng LIBPNG=1.0.9-beta4
libpng LIBPNG=1.0.7-beta18
libpng LIBPNG=1.0.7-beta14
libpng LIBPNG=1.0.29-beta1
libpng LIBPNG=1.2.0-beta3
libpng LIBPNG=1.0.28
libpng LIBPNG=1.0.21-rc2
libpng LIBPNG=1.0.47
libpng LIBPNG=1.0.8-beta1
libpng LIBPNG=1.0.48
libpng LIBPNG=1.0.8-beta3
libpng LIBPNG=1.0.9-beta7
libpng LIBPNG=1.0.7-rc2
libpng LIBPNG=1.0.45
libpng LIBPNG=1.0.28-rc6
libpng LIBPNG=1.0.26
libpng LIBPNG=1.0.9-rc2
libpng LIBPNG=1.0.22-rc1
libpng LIBPNG=1.0.9-beta10
libpng LIBPNG=1.0.27-rc2
libpng LIBPNG=1.2.11-rc3
libpng LIBPNG=1.2.10-beta7
libpng LIBPNG=1.2.10-rc3
libpng LIBPNG=1.0.33
libpng LIBPNG=1.0.23-rc1
libpng LIBPNG=1.0.0
libpng LIBPNG=1.2.1-beta1
libpng LIBPNG=1.0.30-rc1
libpng LIBPNG=1.0.53
libpng LIBPNG=1.0.9-beta5
libpng LIBPNG=1.2.10-rc2
libpng LIBPNG=1.0.23
libpng LIBPNG=1.0.30
libpng LIBPNG=1.0.10
libpng LIBPNG=1.0.31
libpng LIBPNG=1.0.7-beta17
libpng LIBPNG=1.0.19-rc1
libpng LIBPNG=1.2.10-beta5
libpng LIBPNG=1.2.0-beta2
libpng LIBPNG=1.0.27-rc3
libpng LIBPNG=1.0.12-beta1
libpng LIBPNG=1.2.11-beta1
Remediation
Patch Available
Patch Available
Patch Available
Event History
Aug 31, 2011
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-7244?
CVE-2006-7244 has a severity level that can lead to denial of service through a memory leak or segmentation fault.
2
How do I fix CVE-2006-7244?
To fix CVE-2006-7244, upgrade to libpng version 1.2.15beta3 or later.
3
Which versions of libpng are affected by CVE-2006-7244?
CVE-2006-7244 affects libpng versions 1.2.13beta1 and earlier, along with multiple earlier versions.
4
What types of attacks can exploit CVE-2006-7244?
CVE-2006-7244 can be exploited by attackers through specially crafted JPEG images containing a malicious iCCP chunk.
5
What are the consequences of CVE-2006-7244?
The consequences of CVE-2006-7244 include possible denial of service due to memory leaks, leading to application crashes.