Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

libjpeg: Denial of Service

Package(s):

jpeg libjpeg

CVE #(s):

Created:

June 12, 2006

Updated:

June 14, 2006

Description:

Tavis Ormandy of the Gentoo Linux Auditing Team discovered that the vulnerable JPEG library ebuilds compile JPEG without the --maxmem feature which is not recommended. By enticing a user to load a specially crafted JPEG image file an attacker could cause a denial of service, due to memory exhaustion.

Alerts:

Gentoo

200606-11

2006-06-11

(Log in to post comments)