NVD

Id
57568  
Name
CVE-2007-5503  
Description
Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not properly handled by the read_png function.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-11-29  
Modified Date
2013-05-14  
Seq
2007-5503  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
294575 57568 CVE-2007-5503 http://bugs.gentoo.org/show_bug.cgi?id=200350  View
294576 57568 CVE-2007-5503 http://bugs.gentoo.org/show_bug.cgi?id=201860  View
294577 57568 CVE-2007-5503 http://gitweb.freedesktop.org/?p=cairo;a=commitdiff;h=5c7d2d14d78e4dfb1ef6d2c40f0910f177e07360  View
294578 57568 CVE-2007-5503 http://gitweb.freedesktop.org/?p=cairo;a=commitdiff;h=e49bcde27f88e21d5b8037a0089a226096f6514b  View
294579 57568 CVE-2007-5503 http://gitweb.freedesktop.org/?p=cairo;a=commitdiff_plain;h=6020f67f1a49cfe3844c4938d4af24c63c8424cc;hp=c79fc9af334fd6f2d1078071d64178125561b187  View
294580 57568 CVE-2007-5503 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.  View
294581 57568 CVE-2007-5503 SUSE-SR:2008:003  View
294582 57568 CVE-2007-5503 oval:org.mitre.oval:def:11251  View
294583 57568 CVE-2007-5503 RHSA-2007:1078  View
294584 57568 CVE-2007-5503 GLSA-200712-04  View
294585 57568 CVE-2007-5503 GLSA-201209-25  View
294586 57568 CVE-2007-5503 SSA:2007-337-01  View
294587 57568 CVE-2007-5503 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0015  View
294588 57568 CVE-2007-5503 DSA-1542  View
294589 57568 CVE-2007-5503 GLSA-200712-24  View
294590 57568 CVE-2007-5503 MDVSA-2008:019  View
294591 57568 CVE-2007-5503 20080115 rPSA-2008-0015-1 cairo  View
294592 57568 CVE-2007-5503 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.  View
294593 57568 CVE-2007-5503 26650  View
294594 57568 CVE-2007-5503 1019027  View
294595 57568 CVE-2007-5503 USN-550-1  View
294596 57568 CVE-2007-5503 USN-550-2  View
294597 57568 CVE-2007-5503 http://www.vmware.com/security/advisories/VMSA-2008-0014.html  View
294598 57568 CVE-2007-5503 http://www.vmware.com/support/player2/doc/releasenotes_player2.html  View
294599 57568 CVE-2007-5503 http://www.vmware.com/support/server/doc/releasenotes_server.html  View
294600 57568 CVE-2007-5503 http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html  View
294601 57568 CVE-2007-5503 ADV-2007-4045  View
294602 57568 CVE-2007-5503 ADV-2008-2466  View
294603 57568 CVE-2007-5503 cario-readpng-bo(38771)  View
294604 57568 CVE-2007-5503 https://bugzilla.redhat.com/show_bug.cgi?id=387431  View
294605 57568 CVE-2007-5503 https://issues.rpath.com/browse/RPL-1966  View
294606 57568 CVE-2007-5503 FEDORA-2007-3818  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52314 JVNDB-2007-001004 Cairo における複数の整数オーバーフローの脆弱性 Cairo には、read_png() 関数の処理の不備などによる、複数の整数オーバーフローが発生する脆弱性が存在します。 CVE-2007-5503 28858 CVE-2007-5503 57568 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001004.html 2007-11-29 2007-12-17 View