CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-5793

The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a denial of service (crash) via malformed sPLT chunks that trigger an out-of-bounds read.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.022

EPSS Ranking 83.8%

CVSS Severity

CVSS v2 Score 2.6

References

Products affected by CVE-2006-5793

Greg Roelofs » Libpng » Version: 1.0.6

cpe:2.3:a:greg_roelofs:libpng:1.0.6
Greg Roelofs » Libpng » Version: 1.0.7

cpe:2.3:a:greg_roelofs:libpng:1.0.7
Greg Roelofs » Libpng » Version: 1.0.8

cpe:2.3:a:greg_roelofs:libpng:1.0.8
Greg Roelofs » Libpng » Version: 1.0.9

cpe:2.3:a:greg_roelofs:libpng:1.0.9
Greg Roelofs » Libpng » Version: 1.2.0

cpe:2.3:a:greg_roelofs:libpng:1.2.0
Greg Roelofs » Libpng » Version: 1.2.1

cpe:2.3:a:greg_roelofs:libpng:1.2.1
Greg Roelofs » Libpng » Version: 1.2.10

cpe:2.3:a:greg_roelofs:libpng:1.2.10
Greg Roelofs » Libpng » Version: 1.2.11

cpe:2.3:a:greg_roelofs:libpng:1.2.11
Greg Roelofs » Libpng » Version: 1.2.12

cpe:2.3:a:greg_roelofs:libpng:1.2.12
Greg Roelofs » Libpng » Version: 1.2.2

cpe:2.3:a:greg_roelofs:libpng:1.2.2
Greg Roelofs » Libpng » Version: 1.2.3

cpe:2.3:a:greg_roelofs:libpng:1.2.3
Greg Roelofs » Libpng » Version: 1.2.4

cpe:2.3:a:greg_roelofs:libpng:1.2.4
Greg Roelofs » Libpng » Version: 1.2.5

cpe:2.3:a:greg_roelofs:libpng:1.2.5
Greg Roelofs » Libpng » Version: 1.2.6

cpe:2.3:a:greg_roelofs:libpng:1.2.6
Greg Roelofs » Libpng » Version: 1.2.7

cpe:2.3:a:greg_roelofs:libpng:1.2.7
Greg Roelofs » Libpng » Version: 1.2.7rc1

cpe:2.3:a:greg_roelofs:libpng:1.2.7rc1
Greg Roelofs » Libpng » Version: 1.2.8

cpe:2.3:a:greg_roelofs:libpng:1.2.8
Greg Roelofs » Libpng » Version: 1.2.9

cpe:2.3:a:greg_roelofs:libpng:1.2.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-5793

Products

Pricing

Contact Us