CVE-2006-7244

Name of the Vulnerable Software and Affected Versions libpng versions 1.2.13beta1 through 1.2.15beta3

Description The issue is related to a memory leak in the pngwutil.c file of libpng. It allows context-dependent attackers to cause a denial of service, which can result in a memory leak or segmentation fault. This can be achieved by using a JPEG image that contains an iCCP chunk with a negative embedded profile length.

Recommendations For libpng versions 1.2.13beta1 through 1.2.15beta3, update to version 1.2.15beta3 or later to resolve the issue.