NVD

Id
57343  
Name
CVE-2007-5267  
Description
Off-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng before 1.2.22 beta1 allows remote attackers to cause a denial of service (crash) via a crafted PNG image, due to an incorrect fix for CVE-2007-5266.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-10-08  
Modified Date
2011-03-07  
Seq
2007-5267  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
292913 57343 CVE-2007-5267 http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html  View
292914 57343 CVE-2007-5267 http://docs.info.apple.com/article.html?artnum=307562  View
292915 57343 CVE-2007-5267 APPLE-SA-2008-03-18  View
292916 57343 CVE-2007-5267 SSA:2007-325-01  View
292917 57343 CVE-2007-5267 [png-mng-implement] 20071005 libpng 1.2.21 iCCP chunk handling bug  View
292918 57343 CVE-2007-5267 [png-mng-implement] 20071015 libpng 1.2.21 iCCP chunk handling bug  View
292919 57343 CVE-2007-5267 259989  View
292920 57343 CVE-2007-5267 1020521  View
292921 57343 CVE-2007-5267 http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm  View
292922 57343 CVE-2007-5267 http://www.coresecurity.com/?action=item&id=2148  View
292923 57343 CVE-2007-5267 20071112 FLEA-2007-0065-1 libpng  View
292924 57343 CVE-2007-5267 20080304 CORE-2008-0124: Multiple vulnerabilities in Google"s Android SDK  View
292925 57343 CVE-2007-5267 25957  View
292926 57343 CVE-2007-5267 ADV-2007-3391  View
292927 57343 CVE-2007-5267 ADV-2008-0924  View
292928 57343 CVE-2007-5267 ADV-2009-1462  View
292929 57343 CVE-2007-5267 ADV-2009-1560  View
292930 57343 CVE-2007-5267 https://issues.rpath.com/browse/RPL-1814  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52459 JVNDB-2007-001151 libpng の pngset.c における一つずれエラーの脆弱性 libpng の pngset.c には、png_set_iCCP() 関数の ICC プロファイルチャンクにおいて、一つずれのエラーの脆弱性が存在します。 CVE-2007-5267 28622 CVE-2007-5267 57343 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001151.html 2007-10-08 2012-04-18 View