CVE-2006-3334

Buffer overflow in the png_decompress_chunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors related to "chunk error processing," possibly involving the "chunk_name".

🔗 References (50)

• cve@mitrehttp://docs.info.apple.com/article.html?artnum=307562
• cve@mitrehttp://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
• cve@mitrehttp://secunia.com/advisories/20960
• cve@mitrehttp://secunia.com/advisories/22956
• cve@mitrehttp://secunia.com/advisories/22957
• cve@mitrehttp://secunia.com/advisories/22958
• cve@mitrehttp://secunia.com/advisories/23335
• cve@mitrehttp://secunia.com/advisories/29420
• cve@mitrehttp://secunia.com/advisories/33137
• cve@mitrehttp://security.gentoo.org/glsa/glsa-200607-06.xml
• cve@mitrehttp://security.gentoo.org/glsa/glsa-200812-15.xml
• cve@mitrehttp://sourceforge.net/project/shownotes.php?group_id=5624&release_id=428123
• cve@mitrehttp://www.mandriva.com/security/advisories?name=MDKSA-2006:209
• cve@mitrehttp://www.mandriva.com/security/advisories?name=MDKSA-2006:210
• cve@mitrehttp://www.mandriva.com/security/advisories?name=MDKSA-2006:211