5

CVE-2006-7244: libpng Resource Management Errors

CVSS: 5.0v2.0MediumModified
Published 31-08-2011Last modified 16-09-2024
Open JSON

Vulnerability summary

CVE-2006-7244 is a medium (CVSS 5.0) Resource Management Errors vulnerability in libpng. EPSS estimates a 1.24% chance of exploitation in the next 30 days, higher than 68.8% of scored vulnerabilities.

Overall risk
20/100
0100
Low · default modelHow is this calculated?
CVSS score
5.0/10
010
Medium · v2.0 (NVD)
EPSS score
1.24%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 31-08-2011
    PublishedVulnerability first disclosed.
  2. 16-09-2024
    Last modifiedVulnerability information updated.

Description

Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

1.24%

Chance of exploitation in the next 30 days

Percentile

69%

Versus all other CVEs

30-day change

0.00 pp

From 1.24% on 21-09-2026

21-09-202621-10-2026
EPSS score
1.24%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Libpng1 product
  • libpng≤ 1.2.15 | 1.0.0 | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.5 | 1.0.6 | 1.0.6:a | 1.0.6:d | 1.0.6:e | 1.0.6:f | 1.0.6:g | 1.0.6:h | 1.0.6:i | 1.0.6:j | 1.0.7 | 1.0.7:beta11 | 1.0.7:beta12 | 1.0.7:beta13 | 1.0.7:beta14 | 1.0.7:beta15 | 1.0.7:beta16 | 1.0.7:beta17 | 1.0.7:beta18 | 1.0.7:rc1 | 1.0.7:rc2 | 1.0.8 | 1.0.8:beta1 | 1.0.8:beta2 | 1.0.8:beta3 | 1.0.8:beta4 | 1.0.8:rc1 | 1.0.9 | 1.0.9:beta1 | 1.0.9:beta10 | 1.0.9:beta2 | 1.0.9:beta3 | 1.0.9:beta4 | 1.0.9:beta5 | 1.0.9:beta6 | 1.0.9:beta7 | 1.0.9:beta8 | 1.0.9:beta9 | 1.0.9:rc1 | 1.0.9:rc2 | 1.0.10 | 1.0.10:beta1 | 1.0.10:rc1 | 1.0.11 | 1.0.11:beta1 | 1.0.11:beta2 | 1.0.11:beta3 | 1.0.11:rc1 | 1.0.12 | 1.0.12:beta1 | 1.0.12:rc1 | 1.0.13 | 1.0.14 | 1.0.15 | 1.0.15:rc1 | 1.0.15:rc2 | 1.0.15:rc3 | 1.0.16 | 1.0.17 | 1.0.17:rc1 | 1.0.18 | 1.0.19 | 1.0.19:rc1 | 1.0.19:rc2 | 1.0.19:rc3 | 1.0.19:rc5 | 1.0.20 | 1.0.21 | 1.0.21:rc1 | 1.0.21:rc2 | 1.0.22 | 1.0.22:rc1 | 1.0.23 | 1.0.23:rc1 | 1.0.23:rc2 | 1.0.23:rc3 | 1.0.23:rc4 | 1.0.23:rc5 | 1.0.24 | 1.0.24:rc1 | 1.0.25 | 1.0.25:rc1 | 1.0.25:rc2 | 1.0.26 | 1.0.27 | 1.0.27:rc1 | 1.0.27:rc2 | 1.0.27:rc3 | 1.0.27:rc4 | 1.0.27:rc5 | 1.0.27:rc6 | 1.0.28 | 1.0.28:rc2 | 1.0.28:rc3 | 1.0.28:rc4 | 1.0.28:rc5 | 1.0.28:rc6 | 1.0.29 | 1.0.29:beta1 | 1.0.29:rc1 | 1.0.29:rc2 | 1.0.29:rc3 | 1.0.30 | 1.0.30:rc1 | 1.0.31 | 1.0.31:rc01 | 1.0.32 | 1.0.33 | 1.0.34 | 1.0.35 | 1.0.37 | 1.0.38 | 1.0.39 | 1.0.40 | 1.0.41 | 1.0.42 | 1.0.43 | 1.0.44 | 1.0.45 | 1.0.46 | 1.0.47 | 1.0.48 | 1.0.50 | 1.0.51 | 1.0.52 | 1.0.53 | 1.0.54 | 1.2.0 | 1.2.0:beta1 | 1.2.0:beta2 | 1.2.0:beta3 | 1.2.0:beta4 | 1.2.0:beta5 | 1.2.0:rc1 | 1.2.1 | 1.2.1:beta1 | 1.2.1:beta2 | 1.2.1:beta3 | 1.2.1:beta4 | 1.2.1:rc1 | 1.2.1:rc2 | 1.2.10 | 1.2.10:beta1 | 1.2.10:beta2 | 1.2.10:beta3 | 1.2.10:beta4 | 1.2.10:beta5 | 1.2.10:beta6 | 1.2.10:beta7 | 1.2.10:rc1 | 1.2.10:rc2 | 1.2.10:rc3 | 1.2.11 | 1.2.11:beta1 | 1.2.11:beta2 | 1.2.11:beta3 | 1.2.11:beta4 | 1.2.11:rc1 | 1.2.11:rc2 | 1.2.11:rc3 | 1.2.11:rc5 | 1.2.13 | 1.2.13:beta1 | 1.2.13:rc1 | 1.2.13:rc2 | 1.2.14 | 1.2.14:beta1 | 1.2.14:beta2 | 1.2.14:rc1 | 1.2.15 | 1.2.15:beta1

1 vendor · 1 product

References

4 links