CVE-2006-7244 Information

Description

Memory leak in pngwutil.c in libpng 1.2.13beta1 and other versions before 1.2.15beta3 allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length.

Reference

http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=commitdiff;h=948ee23a2a400672b1751cfc646a7467741e9b2epatch18 http://www.openwall.com/lists/oss-security/2011/03/22/7 http://www.openwall.com/lists/oss-security/2011/03/28/6 https://bugs.gentoo.org/159216?id=159216