CVE:CVE-2006-7244
CNNVD:CNNVD-201108-523
libpng是一个可对PNG图形文件实现创建、读写等操作的PNG参考库。
libpng 1.2.13beta1及1.2.15beta3之前版本中的pngwutil.c中存在内存泄露漏洞。攻击者可借助包含iCCP数据块的JPEG图像导致拒绝服务（内存泄露或分割错误），该数据块带有负的嵌入属性长度。
solution:Upgrade libpng libpng to a higher version than *:beta2,1.0.0,1.0.1,1.0.2,1.0.3,1.0.5,1.0.6,1.0.6:a,1.0.6:d,1.0.6:e,1.0.6:f,1.0.6:g,1.0.6:h,1.0.6:i,1.0.6:j,1.0.7,1.0.7:beta11,1.0.7:beta12,1.0.7:beta13,1.0.7:beta14,1.0.7:beta15,1.0.7:beta16,1.0.7:beta17,1.0.7:beta18,1.0.7:rc1,1.0.7:rc2,1.0.8,1.0.8:beta1,1.0.8:beta2,1.0.8:beta3,1.0.8:beta4,1.0.8:rc1,1.0.9,1.0.9:beta1,1.0.9:beta10,1.0.9:beta2,1.0.9:beta3,1.0.9:beta4,1.0.9:beta5,1.0.9:beta6,1.0.9:beta7,1.0.9:beta8,1.0.9:beta9,1.0.9:rc1,1.0.9:rc2,1.0.10,1.0.10:beta1,1.0.10:rc1,1.0.11,1.0.11:beta1,1.0.11:beta2,1.0.11:beta3,1.0.11:rc1,1.0.12,1.0.12:beta1,1.0.12:rc1,1.0.13,1.0.14,1.0.15,1.0.15:rc1,1.0.15:rc2,1.0.15:rc3,1.0.16,1.0.17,1.0.17:rc1,1.0.18,1.0.19,1.0.19:rc1,1.0.19:rc2,1.0.19:rc3,1.0.19:rc5,1.0.20,1.0.21,1.0.21:rc1,1.0.21:rc2,1.0.22,1.0.22:rc1,1.0.23,1.0.23:rc1,1.0.23:rc2,1.0.23:rc3,1.0.23:rc4,1.0.23:rc5,1.0.24,1.0.24:rc1,1.0.25,1.0.25:rc1,1.0.25:rc2,1.0.26,1.0.27,1.0.27:rc1,1.0.27:rc2,1.0.27:rc3,1.0.27:rc4,1.0.27:rc5,1.0.27:rc6,1.0.28,1.0.28:rc2,1.0.28:rc3,1.0.28:rc4,1.0.28:rc5,1.0.28:rc6,1.0.29,1.0.29:beta1,1.0.29:rc1,1.0.29:rc2,1.0.29:rc3,1.0.30,1.0.30:rc1,1.0.31,1.0.31:rc01,1.0.32,1.0.33,1.0.34,1.0.35,1.0.37,1.0.38,1.0.39,1.0.40,1.0.41,1.0.42,1.0.43,1.0.44,1.0.45,1.0.46,1.0.47,1.0.48,1.0.50,1.0.51,1.0.52,1.0.53,1.0.54,1.2.0,1.2.0:beta1,1.2.0:beta2,1.2.0:beta3,1.2.0:beta4,1.2.0:beta5,1.2.0:rc1,1.2.1,1.2.1:beta1,1.2.1:beta2,1.2.1:beta3,1.2.1:beta4,1.2.1:rc1,1.2.1:rc2,1.2.10,1.2.10:beta1,1.2.10:beta2,1.2.10:beta3,1.2.10:beta4,1.2.10:beta5,1.2.10:beta6,1.2.10:beta7,1.2.10:rc1,1.2.10:rc2,1.2.10:rc3,1.2.11,1.2.11:beta1,1.2.11:beta2,1.2.11:beta3,1.2.11:beta4,1.2.11:rc1,1.2.11:rc2,1.2.11:rc3,1.2.11:rc5,1.2.13,1.2.13:beta1,1.2.13:rc1,1.2.13:rc2,1.2.14,1.2.14:beta1,1.2.14:beta2,1.2.14:rc1,1.2.15,1.2.15:beta1,and avoid the version *:beta2,1.0.0,1.0.1,1.0.2,1.0.3,1.0.5,1.0.6,1.0.6:a,1.0.6:d,1.0.6:e,1.0.6:f,1.0.6:g,1.0.6:h,1.0.6:i,1.0.6:j,1.0.7,1.0.7:beta11,1.0.7:beta12,1.0.7:beta13,1.0.7:beta14,1.0.7:beta15,1.0.7:beta16,1.0.7:beta17,1.0.7:beta18,1.0.7:rc1,1.0.7:rc2,1.0.8,1.0.8:beta1,1.0.8:beta2,1.0.8:beta3,1.0.8:beta4,1.0.8:rc1,1.0.9,1.0.9:beta1,1.0.9:beta10,1.0.9:beta2,1.0.9:beta3,1.0.9:beta4,1.0.9:beta5,1.0.9:beta6,1.0.9:beta7,1.0.9:beta8,1.0.9:beta9,1.0.9:rc1,1.0.9:rc2,1.0.10,1.0.10:beta1,1.0.10:rc1,1.0.11,1.0.11:beta1,1.0.11:beta2,1.0.11:beta3,1.0.11:rc1,1.0.12,1.0.12:beta1,1.0.12:rc1,1.0.13,1.0.14,1.0.15,1.0.15:rc1,1.0.15:rc2,1.0.15:rc3,1.0.16,1.0.17,1.0.17:rc1,1.0.18,1.0.19,1.0.19:rc1,1.0.19:rc2,1.0.19:rc3,1.0.19:rc5,1.0.20,1.0.21,1.0.21:rc1,1.0.21:rc2,1.0.22,1.0.22:rc1,1.0.23,1.0.23:rc1,1.0.23:rc2,1.0.23:rc3,1.0.23:rc4,1.0.23:rc5,1.0.24,1.0.24:rc1,1.0.25,1.0.25:rc1,1.0.25:rc2,1.0.26,1.0.27,1.0.27:rc1,1.0.27:rc2,1.0.27:rc3,1.0.27:rc4,1.0.27:rc5,1.0.27:rc6,1.0.28,1.0.28:rc2,1.0.28:rc3,1.0.28:rc4,1.0.28:rc5,1.0.28:rc6,1.0.29,1.0.29:beta1,1.0.29:rc1,1.0.29:rc2,1.0.29:rc3,1.0.30,1.0.30:rc1,1.0.31,1.0.31:rc01,1.0.32,1.0.33,1.0.34,1.0.35,1.0.37,1.0.38,1.0.39,1.0.40,1.0.41,1.0.42,1.0.43,1.0.44,1.0.45,1.0.46,1.0.47,1.0.48,1.0.50,1.0.51,1.0.52,1.0.53,1.0.54,1.2.0,1.2.0:beta1,1.2.0:beta2,1.2.0:beta3,1.2.0:beta4,1.2.0:beta5,1.2.0:rc1,1.2.1,1.2.1:beta1,1.2.1:beta2,1.2.1:beta3,1.2.1:beta4,1.2.1:rc1,1.2.1:rc2,1.2.10,1.2.10:beta1,1.2.10:beta2,1.2.10:beta3,1.2.10:beta4,1.2.10:beta5,1.2.10:beta6,1.2.10:beta7,1.2.10:rc1,1.2.10:rc2,1.2.10:rc3,1.2.11,1.2.11:beta1,1.2.11:beta2,1.2.11:beta3,1.2.11:beta4,1.2.11:rc1,1.2.11:rc2,1.2.11:rc3,1.2.11:rc5,1.2.13,1.2.13:beta1,1.2.13:rc1,1.2.13:rc2,1.2.14,1.2.14:beta1,1.2.14:beta2,1.2.14:rc1,1.2.15,1.2.15:beta1