CVE-2006-0481
Fixed in a distro release EPSS 3%
Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service (crash) when the png_do_strip_filler function is used to strip alpha channels out of the image.
Products: greg_roelofs libpng
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 4 | libpng | 2:1.2.7-1.el4.2 |
| Red Hat Enterprise Linux 4 | libpng-debuginfo | 2:1.2.7-1.el4.2 |
| Red Hat Enterprise Linux 4 | libpng-devel | 2:1.2.7-1.el4.2 |