CVE:CVE-2006-5793
CNNVD:CNNVD-200611-295
libpng中的sPLT块处理代码(pngset.c中的png_set_sPLT函数)对错误数据类型使用sizeof操作符，上下文依赖的攻击者可以通过畸形sPLT块触发出界读操作从而发起拒绝服务攻击(崩溃)。
solution:Upgrade greg_roelofs libpng to a higher version than 1.0.6,1.0.7,1.0.8,1.0.9,1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.7rc1,1.2.8,1.2.9,1.2.10,1.2.11,1.2.12,and avoid the version 1.0.6,1.0.7,1.0.8,1.0.9,1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.7rc1,1.2.8,1.2.9,1.2.10,1.2.11,1.2.12