CVE-2006-0053 Null dereference in n/a

Low 2.6 Published Updated

A user-assisted attacker can cause a denial of service via a segmentation fault in the Imager Perl library by providing a malformed JPEG or TGA image.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Not stated
Victim action needed
A user has to click or open something
Fix
Available

What is CVE-2006-0053?

CVE-2006-0053 is a low-severity vulnerability in n/a, published on 10 Apr 2006.

Official description

Imager (libimager-perl) before 0.50 allows user-assisted attackers to cause a denial of service (segmentation fault) by writing a 2- or 4-channel JPEG image (or a 2-channel TGA image) to a scalar, which triggers a NULL pointer dereference.

Weakness: CWE-399

Which versions are affected by CVE-2006-0053?

It affects 1 product.

Products include Tony Cook Imager.

How do I fix CVE-2006-0053?

Upgrade to a fixed version.

Is CVE-2006-0053 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2006-0053 exists.

Public exploit code: 1 Exploit-DB entry.

Sources

Also known as DEBIAN-CVE-2006-0053, DSA-1028-1, GHSA-727c-8vjf-pv2j.

Is CVE-2006-0053 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free