[Forgot Password]
Login  Register Subscribe

23631

 
 

122183

 
 

98060

 
 

909

 
 

79198

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2007-5266

Date: (C)2007-10-08   (M)2015-12-16 


Off-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng before 1.0.29 beta1 and 1.2.x before 1.2.21 beta1 allows remote attackers to cause a denial of service (crash) via a crafted PNG image that prevents a name field from being NULL terminated.

CVSS Score: 4.3Access Vector: NETWORK
Exploit Score: 8.6Access Complexity: MEDIUM
Impact Score: 2.9Authentication: NONE
 Confidentiality: NONE
 Integrity: NONE
 Availability: PARTIAL





Reference:
SUNALERT-1020521
http://www.securityfocus.com/archive/1/archive/1/483582/100/0/threaded
http://www.securityfocus.com/archive/1/archive/1/489135/100/0/threaded
BID-25957
SUNALERT-259989
SECUNIA-27284
SECUNIA-27529
SECUNIA-27629
SECUNIA-27746
SECUNIA-29420
SECUNIA-30161
SECUNIA-30430
SECUNIA-35302
SECUNIA-35386
ADV-2008-0924
ADV-2008-1697
ADV-2009-1462
ADV-2009-1560
APPLE-SA-2008-03-18
APPLE-SA-2008-05-28
GLSA-200711-08
GLSA-200805-07
MDKSA-2007:217
SSA:2007-325-01
TA08-150A
http://sourceforge.net/mailarchive/forum.php?thread_name=5122753600C3E94F87FBDFFCC090D1FF0400EA68%40MERCMBX07.na.sas.com&forum_name=png-mng-implement
http://sourceforge.net/mailarchive/message.php?msg_name=e56ccc8f0709140846k24e9a040r81623783b6b1c00f%40mail.gmail.com
http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html
http://bugs.gentoo.org/show_bug.cgi?id=195261
http://docs.info.apple.com/article.html?artnum=307562
http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm
http://www.coresecurity.com/?action=item&id=2148
https://issues.rpath.com/browse/RPL-1814

CPE    2
cpe:/a:libpng:libpng:1.0.28
cpe:/a:libpng:libpng:1.2.20
CWE    1
CWE-189

© 2013 SecPod Technologies