[Forgot Password]
Login  Register Subscribe

24003

 
 

131573

 
 

108684

 
 

909

 
 

85446

 
 

134

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2007-5267Date: (C)2007-10-08   (M)2018-02-19


Off-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng before 1.2.22 beta1 allows remote attackers to cause a denial of service (crash) via a crafted PNG image, due to an incorrect fix for CVE-2007-5266.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : CVSS Score : 4.3
Exploit Score: Exploit Score: 8.6
Impact Score: Impact Score: 2.9
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: Access Vector: NETWORK
Attack Complexity: Access Complexity: MEDIUM
Privileges Required: Authentication: NONE
User Interaction: Confidentiality: NONE
Scope: Integrity: NONE
Confidentiality: Availability: PARTIAL
Integrity:  
Availability:  
  
Reference:
SUNALERT-1020521
http://www.securityfocus.com/archive/1/archive/1/483582/100/0/threaded
http://www.securityfocus.com/archive/1/archive/1/489135/100/0/threaded
BID-25957
SUNALERT-259989
SECUNIA-27130
SECUNIA-27284
SECUNIA-27746
SECUNIA-29420
SECUNIA-35302
SECUNIA-35386
ADV-2007-3391
ADV-2008-0924
ADV-2009-1462
ADV-2009-1560
APPLE-SA-2008-03-18
SSA:2007-325-01
http://sourceforge.net/mailarchive/forum.php?thread_name=47067C84.7010205%40playstation.sony.com&forum_name=png-mng-implement
http://sourceforge.net/mailarchive/message.php?msg_name=3.0.6.32.20071005143158.012ada08%40mail.comcast.net
http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html
http://docs.info.apple.com/article.html?artnum=307562
http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm
http://www.coresecurity.com/?action=item&id=2148
https://issues.rpath.com/browse/RPL-1814

CPE    1
cpe:/a:libpng:libpng:1.2.21
CWE    1
CWE-189

© SecPod Technologies