NVD

Id
57345  
Name
CVE-2007-5269  
Description
Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL (png_handle_sCAL), (3) tEXt (png_push_read_tEXt), (4) iTXt (png_handle_iTXt), and (5) ztXT (png_handle_ztXt) chunking in PNG images, which trigger out-of-bounds read operations.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-10-08  
Modified Date
2013-05-14  
Seq
2007-5269  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
292958 57345 CVE-2007-5269 http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html  View
292959 57345 CVE-2007-5269 http://bugs.gentoo.org/show_bug.cgi?id=195261  View
292960 57345 CVE-2007-5269 http://docs.info.apple.com/article.html?artnum=307562  View
292961 57345 CVE-2007-5269 APPLE-SA-2008-05-28  View
292962 57345 CVE-2007-5269 APPLE-SA-2008-03-18  View
292963 57345 CVE-2007-5269 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.  View
292964 57345 CVE-2007-5269 [security-announce] 20080317 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues  View
292965 57345 CVE-2007-5269 oval:org.mitre.oval:def:10614  View
292966 57345 CVE-2007-5269 GLSA-201209-25  View
292967 57345 CVE-2007-5269 SSA:2007-325-01  View
292968 57345 CVE-2007-5269 [png-mng-implement] 20071004 Libpng-1.2.21 and libpng-1.0.29 released  View
292969 57345 CVE-2007-5269 259989  View
292970 57345 CVE-2007-5269 1020521  View
292971 57345 CVE-2007-5269 http://support.avaya.com/elmodocs2/security/ASA-2007-460.htm  View
292972 57345 CVE-2007-5269 http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm  View
292973 57345 CVE-2007-5269 http://www.coresecurity.com/?action=item&id=2148  View
292974 57345 CVE-2007-5269 DSA-1750  View
292975 57345 CVE-2007-5269 GLSA-200711-08  View
292976 57345 CVE-2007-5269 GLSA-200805-07  View
292977 57345 CVE-2007-5269 MDKSA-2007:217  View
292978 57345 CVE-2007-5269 SUSE-SR:2007:025  View
292979 57345 CVE-2007-5269 RHSA-2007:0992  View
292980 57345 CVE-2007-5269 20071112 FLEA-2007-0065-1 libpng  View
292981 57345 CVE-2007-5269 20080304 CORE-2008-0124: Multiple vulnerabilities in Google"s Android SDK  View
292982 57345 CVE-2007-5269 20080318 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues  View
292983 57345 CVE-2007-5269 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.  View
292984 57345 CVE-2007-5269 25956  View
292985 57345 CVE-2007-5269 28276  View
292986 57345 CVE-2007-5269 1018849  View
292987 57345 CVE-2007-5269 USN-538-1  View
292988 57345 CVE-2007-5269 TA08-150A  View
292989 57345 CVE-2007-5269 http://www.vmware.com/security/advisories/VMSA-2008-0005.html  View
292990 57345 CVE-2007-5269 http://www.vmware.com/security/advisories/VMSA-2008-0014.html  View
292991 57345 CVE-2007-5269 http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html  View
292992 57345 CVE-2007-5269 http://www.vmware.com/support/player/doc/releasenotes_player.html  View
292993 57345 CVE-2007-5269 http://www.vmware.com/support/player2/doc/releasenotes_player2.html  View
292994 57345 CVE-2007-5269 http://www.vmware.com/support/server/doc/releasenotes_server.html  View
292995 57345 CVE-2007-5269 http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html  View
292996 57345 CVE-2007-5269 http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html  View
292997 57345 CVE-2007-5269 ADV-2007-3390  View
292998 57345 CVE-2007-5269 ADV-2008-0905  View
292999 57345 CVE-2007-5269 ADV-2008-0924  View
293000 57345 CVE-2007-5269 ADV-2008-1697  View
293001 57345 CVE-2007-5269 ADV-2008-2466  View
293002 57345 CVE-2007-5269 ADV-2009-1462  View
293003 57345 CVE-2007-5269 ADV-2009-1560  View
293004 57345 CVE-2007-5269 https://bugzilla.redhat.com/show_bug.cgi?id=327791  View
293005 57345 CVE-2007-5269 https://bugzilla.redhat.com/show_bug.cgi?id=337461  View
293006 57345 CVE-2007-5269 https://issues.rpath.com/browse/RPL-1814  View
293007 57345 CVE-2007-5269 FEDORA-2007-734  View
293008 57345 CVE-2007-5269 FEDORA-2007-2521  View
293009 57345 CVE-2007-5269 FEDORA-2007-2666  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52220 JVNDB-2007-000910 libpng の複数のチャンクハンドラにおけるサービス運用妨害 (DoS) の脆弱性 libpng には、複数のチャンクハンドラに不備が存在するために、不正な PNG イメージを取り扱った際にサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-5269 28624 CVE-2007-5269 57345 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000910.html 2007-10-08 2012-04-18 View