[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2007-5269Date: (C)2007-10-08   (M)2024-02-16


Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL (png_handle_sCAL), (3) tEXt (png_push_read_tEXt), (4) iTXt (png_handle_iTXt), and (5) ztXT (png_handle_ztXt) chunking in PNG images, which trigger out-of-bounds read operations.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL
  
Reference:
SECTRACK-1018849
SUNALERT-1020521
http://www.securityfocus.com/archive/1/483582/100/0/threaded
http://www.securityfocus.com/archive/1/489135/100/0/threaded
http://www.securityfocus.com/archive/1/489739/100/0/threaded
http://www.securityfocus.com/archive/1/495869/100/0/threaded
BID-25956
SUNALERT-259989
SECUNIA-27093
SECUNIA-27284
SECUNIA-27369
SECUNIA-27391
SECUNIA-27405
SECUNIA-27492
SECUNIA-27529
SECUNIA-27629
SECUNIA-27662
SECUNIA-27746
SECUNIA-27965
BID-28276
SECUNIA-29420
SECUNIA-30161
SECUNIA-30430
SECUNIA-31712
SECUNIA-31713
SECUNIA-34388
SECUNIA-35302
SECUNIA-35386
ADV-2007-3390
ADV-2008-0905
ADV-2008-0924
ADV-2008-1697
ADV-2008-2466
ADV-2009-1462
ADV-2009-1560
APPLE-SA-2008-03-18
APPLE-SA-2008-05-28
DSA-1750
FEDORA-2007-2521
FEDORA-2007-2666
FEDORA-2007-734
GLSA-200711-08
GLSA-200805-07
GLSA-201209-25
MDKSA-2007:217
RHSA-2007:0992
SSA:2007-325-01
SUSE-SR:2007:025
TA08-150A
USN-538-1
http://sourceforge.net/mailarchive/forum.php?thread_name=3.0.6.32.20071004082318.012a7628%40mail.comcast.net&forum_name=png-mng-implement
http://lists.vmware.com/pipermail/security-announce/2008/000008.html
http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html
http://bugs.gentoo.org/show_bug.cgi?id=195261
http://docs.info.apple.com/article.html?artnum=307562
http://support.avaya.com/elmodocs2/security/ASA-2007-460.htm
http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm
http://www.coresecurity.com/?action=item&id=2148
http://www.vmware.com/security/advisories/VMSA-2008-0005.html
http://www.vmware.com/security/advisories/VMSA-2008-0014.html
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html
http://www.vmware.com/support/player/doc/releasenotes_player.html
http://www.vmware.com/support/player2/doc/releasenotes_player2.html
http://www.vmware.com/support/server/doc/releasenotes_server.html
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html
https://bugzilla.redhat.com/show_bug.cgi?id=327791
https://bugzilla.redhat.com/show_bug.cgi?id=337461
https://issues.rpath.com/browse/RPL-1814
oval:org.mitre.oval:def:10614

CPE    2
cpe:/a:libpng:libpng:1.0.28
cpe:/a:libpng:libpng
CWE    1
CWE-20
OVAL    3
oval:org.secpod.oval:def:600371
oval:org.secpod.oval:def:700311
oval:org.mitre.oval:def:6557

© SecPod Technologies