CVE-2006-4806

Multiple integer overflows in imlib2 allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) ARGB (loader_argb.c), (2) PNG (loader_png.c), (3) LBM (loader_lbm.c), (4) JPEG (loader_jpeg.c), or (5) TIFF (loader_tiff.c) images.

• http://secunia.com/advisories/22732Vendor Advisory
• http://secunia.com/advisories/22744Vendor Advisory
• http://secunia.com/advisories/22752Patch, Vendor Advisory
• http://secunia.com/advisories/22932
• http://secunia.com/advisories/23441
• http://security.gentoo.org/glsa/glsa-200612-20.xml
• http://www.discontinuity.info/~rowan/pocs/libimlib2_pocs-1.2.0-2.2.tar.gz
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:198
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:156
• http://www.novell.com/linux/security/advisories/2006_26_sr.html
• http://www.osvdb.org/30105
• http://www.osvdb.org/30106
• http://www.osvdb.org/30107
• http://www.osvdb.org/30108
• http://www.osvdb.org/30109
• http://www.securityfocus.com/bid/20903
• http://www.ubuntu.com/usn/usn-376-1
• http://www.ubuntu.com/usn/usn-376-2Patch
• http://www.vupen.com/english/advisories/2006/4349
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30064
• http://secunia.com/advisories/22732Vendor Advisory
• http://secunia.com/advisories/22744Vendor Advisory
• http://secunia.com/advisories/22752Patch, Vendor Advisory
• http://secunia.com/advisories/22932
• http://secunia.com/advisories/23441
• http://security.gentoo.org/glsa/glsa-200612-20.xml
• http://www.discontinuity.info/~rowan/pocs/libimlib2_pocs-1.2.0-2.2.tar.gz
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:198
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:156
• http://www.novell.com/linux/security/advisories/2006_26_sr.html
• http://www.osvdb.org/30105
• http://www.osvdb.org/30106
• http://www.osvdb.org/30107
• http://www.osvdb.org/30108
• http://www.osvdb.org/30109
• http://www.securityfocus.com/bid/20903
• http://www.ubuntu.com/usn/usn-376-1
• http://www.ubuntu.com/usn/usn-376-2Patch
• http://www.vupen.com/english/advisories/2006/4349
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30064

Published

Nov 7, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4799Buffer overflow in ffmpeg for xine-lib before 1.1.2 might al…
• CVE-2006-4800Multiple buffer overflows in libavcodec in ffmpeg before 0.4…
• CVE-2006-4801Race condition in Deja Vu, as used in Roxio Toast Titanium 7…
• CVE-2006-4802Format string vulnerability in the Real Time Virus Scan serv…
• CVE-2006-4803The Fan-Out Linux and UNIX receiver scripts in Novell Identi…
• CVE-2006-4805epan/dissectors/packet-xot.c in the XOT dissector (dissect_x…
• CVE-2006-4807loader_tga.c in imlib2 before 1.2.1, and possibly other vers…
• CVE-2006-4808Heap-based buffer overflow in loader_tga.c in imlib2 before …
• CVE-2006-4809Stack-based buffer overflow in loader_pnm.c in imlib2 before…
• CVE-2006-4810Buffer overflow in the readline function in util/texindex.c,…
• CVE-2006-4811Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, a…
• CVE-2006-4812Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 all…