CVE-2006-0481

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service (crash) when the png_do_strip_filler function is used to strip alpha channels out of the image.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/18654Patch, Vendor Advisory
http://secunia.com/advisories/18863Patch, Vendor Advisory
http://secunia.com/advisories/33137Vendor Advisory
http://security.gentoo.org/glsa/glsa-200812-15.xml
http://securitytracker.com/id?1015615Patch
http://securitytracker.com/id?1015617Patch
http://www.redhat.com/support/errata/RHSA-2006-0205.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/16626Patch
http://www.vupen.com/english/advisories/2006/0393Vendor Advisory
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179455
https://exchange.xforce.ibmcloud.com/vulnerabilities/24396
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10780
http://secunia.com/advisories/18654Patch, Vendor Advisory
http://secunia.com/advisories/18863Patch, Vendor Advisory
http://secunia.com/advisories/33137Vendor Advisory
http://security.gentoo.org/glsa/glsa-200812-15.xml
http://securitytracker.com/id?1015615Patch
http://securitytracker.com/id?1015617Patch
http://www.redhat.com/support/errata/RHSA-2006-0205.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/16626Patch
http://www.vupen.com/english/advisories/2006/0393Vendor Advisory
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179455
https://exchange.xforce.ibmcloud.com/vulnerabilities/24396
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10780

Timeline

Published: Jan 31, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-04822.1Linux kernel 2.6.15.1 and earlier, when running on SPARC architectures, allows local users to cause a denial of service (hang) via a "date -CVE-2006-04837.8Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service (device reloa CVE-2006-04845.0Directory traversal vulnerability in Vis.pl, as part of the FACE CONTROL product, allows remote attackers to read arbitrary files via a .. (CVE-2006-04854.6The TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.2(18)S before 12.2(18)S11, and certain other releases before 25 January 2006 doe CVE-2006-04864.6Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains reu CVE-2006-04875.0Multiple unspecified vulnerabilities in Tumbleweed MailGate Email Firewall (EMF) 6.x allow remote attackers to (1) trigger temporarily incor CVE-2006-04882.1The VDM (Virtual DOS Machine) emulation environment for MS-DOS applications in Windows 2000, Windows XP SP2, and Windows Server 2003 allows CVE-2006-04894.6Buffer overflow in the font command of mIRC, probably 6.16, allows local users to execute arbitrary code via a long string. NOTE: the origin CVE-2006-04907.5SQL injection vulnerability in login.asp in ASPThai.Net ASPThai Forums 8.0 and earlier allows remote attackers to execute arbitrary SQL comm CVE-2006-04917.5SQL injection vulnerability in SZUserMgnt.class.php in SZUserMgnt 1.4 allows remote attackers to execute arbitrary SQL commands via the user CVE-2006-04927.5Multiple SQL injection vulnerabilities in Calendarix allow remote attackers to execute arbitrary SQL commands via (1) the catview parameter CVE-2006-04934.3Cross-site scripting (XSS) vulnerability in MG2 (formerly known as Minigal) 0.5.1 allows remote attackers to inject arbitrary web script or