[Forgot Password]
Login  Register Subscribe

23631

 
 

126941

 
 

98250

 
 

909

 
 

79281

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2007-5269

Date: (C)2007-10-08   (M)2017-11-18 


Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL (png_handle_sCAL), (3) tEXt (png_push_read_tEXt), (4) iTXt (png_handle_iTXt), and (5) ztXT (png_handle_ztXt) chunking in PNG images, which trigger out-of-bounds read operations.

CVSS Score: 5.0Access Vector: NETWORK
Exploit Score: 10.0Access Complexity: LOW
Impact Score: 2.9Authentication: NONE
 Confidentiality: NONE
 Integrity: NONE
 Availability: PARTIAL





Reference:
SECTRACK-1018849
SUNALERT-1020521
http://www.securityfocus.com/archive/1/archive/1/483582/100/0/threaded
http://www.securityfocus.com/archive/1/archive/1/489135/100/0/threaded
http://www.securityfocus.com/archive/1/archive/1/489739/100/0/threaded
http://www.securityfocus.com/archive/1/archive/1/495869/100/0/threaded
BID-25956
SUNALERT-259989
SECUNIA-27093
SECUNIA-27284
SECUNIA-27369
SECUNIA-27391
SECUNIA-27405
SECUNIA-27492
SECUNIA-27529
SECUNIA-27629
SECUNIA-27662
SECUNIA-27746
SECUNIA-27965
BID-28276
SECUNIA-29420
SECUNIA-30161
SECUNIA-30430
SECUNIA-31712
SECUNIA-31713
SECUNIA-34388
SECUNIA-35302
SECUNIA-35386
ADV-2007-3390
ADV-2008-0905
ADV-2008-0924
ADV-2008-1697
ADV-2008-2466
ADV-2009-1462
ADV-2009-1560
APPLE-SA-2008-03-18
APPLE-SA-2008-05-28
DSA-1750
FEDORA-2007-2521
FEDORA-2007-2666
FEDORA-2007-734
GLSA-200711-08
GLSA-200805-07
GLSA-201209-25
MDKSA-2007:217
RHSA-2007:0992
SSA:2007-325-01
SUSE-SR:2007:025
TA08-150A
USN-538-1
http://sourceforge.net/mailarchive/forum.php?thread_name=3.0.6.32.20071004082318.012a7628%40mail.comcast.net&forum_name=png-mng-implement
http://lists.vmware.com/pipermail/security-announce/2008/000008.html
http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html
http://bugs.gentoo.org/show_bug.cgi?id=195261
http://docs.info.apple.com/article.html?artnum=307562
http://support.avaya.com/elmodocs2/security/ASA-2007-460.htm
http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm
http://www.coresecurity.com/?action=item&id=2148
http://www.vmware.com/security/advisories/VMSA-2008-0005.html
http://www.vmware.com/security/advisories/VMSA-2008-0014.html
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html
http://www.vmware.com/support/player/doc/releasenotes_player.html
http://www.vmware.com/support/player2/doc/releasenotes_player2.html
http://www.vmware.com/support/server/doc/releasenotes_server.html
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html
https://bugzilla.redhat.com/show_bug.cgi?id=327791
https://bugzilla.redhat.com/show_bug.cgi?id=337461
https://issues.rpath.com/browse/RPL-1814

CPE    2
cpe:/a:libpng:libpng:1.0.28
cpe:/a:libpng:libpng:1.2.20
CWE    1
CWE-20
OVAL    3
oval:org.secpod.oval:def:600371
oval:org.mitre.oval:def:6557
oval:org.secpod.oval:def:700311

© 2013 SecPod Technologies