CVE-2007-5269

Published: Oct 8, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL (png_handle_sCAL), (3) tEXt (png_push_read_tEXt), (4) iTXt (png_handle_iTXt), and (5) ztXT (png_handle_ztXt) chunking in PNG images, which trigger out-of-bounds read operations.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

27965

third-party-advisory

x_refsource_SECUNIA

https://issues.rpath.com/browse/RPL-1814

x_refsource_CONFIRM

MDKSA-2007:217

vendor-advisory

x_refsource_MANDRIVA

35386

third-party-advisory

x_refsource_SECUNIA

FEDORA-2007-2666

vendor-advisory

x_refsource_FEDORA

GLSA-201209-25

vendor-advisory

x_refsource_GENTOO

http://support.avaya.com/elmodocs2/security/ASA-2007-460.htm

x_refsource_CONFIRM

http://www.vmware.com/security/advisories/VMSA-2008-0014.html

x_refsource_CONFIRM

FEDORA-2007-2521

vendor-advisory

x_refsource_FEDORA

27093

third-party-advisory

x_refsource_SECUNIA

1020521

vendor-advisory

x_refsource_SUNALERT

ADV-2009-1560

vdb-entry

x_refsource_VUPEN

34388

third-party-advisory

x_refsource_SECUNIA

ADV-2009-1462

vdb-entry

x_refsource_VUPEN

27662

third-party-advisory

x_refsource_SECUNIA

31712

third-party-advisory

x_refsource_SECUNIA

http://bugs.gentoo.org/show_bug.cgi?id=195261

x_refsource_CONFIRM

FEDORA-2007-734

vendor-advisory

x_refsource_FEDORA

27529

third-party-advisory

x_refsource_SECUNIA

http://www.vmware.com/support/server/doc/releasenotes_server.html

x_refsource_CONFIRM

27405

third-party-advisory

x_refsource_SECUNIA

27746

third-party-advisory

x_refsource_SECUNIA

RHSA-2007:0992

vendor-advisory

x_refsource_REDHAT

ADV-2007-3390

vdb-entry

x_refsource_VUPEN

http://www.coresecurity.com/?action=item&id=2148

x_refsource_MISC

259989

vendor-advisory

x_refsource_SUNALERT

35302

third-party-advisory

x_refsource_SECUNIA

31713

third-party-advisory

x_refsource_SECUNIA

[png-mng-implement] 20071004 Libpng-1.2.21 and libpng-1.0.29 released

mailing-list

x_refsource_MLIST

http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html

x_refsource_CONFIRM

ADV-2008-0924

vdb-entry

x_refsource_VUPEN

http://www.vmware.com/support/player2/doc/releasenotes_player2.html

x_refsource_CONFIRM

TA08-150A

third-party-advisory

x_refsource_CERT

27391

third-party-advisory

x_refsource_SECUNIA

25956

vdb-entry

x_refsource_BID

SUSE-SR:2007:025

vendor-advisory

x_refsource_SUSE

27369

third-party-advisory

x_refsource_SECUNIA

1018849

vdb-entry

x_refsource_SECTRACK

oval:org.mitre.oval:def:10614

vdb-entry

signature

x_refsource_OVAL

https://bugzilla.redhat.com/show_bug.cgi?id=327791

x_refsource_CONFIRM

27492

third-party-advisory

x_refsource_SECUNIA

http://www.vmware.com/support/player/doc/releasenotes_player.html

x_refsource_CONFIRM

http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

x_refsource_CONFIRM

29420

third-party-advisory

x_refsource_SECUNIA

APPLE-SA-2008-03-18

vendor-advisory

x_refsource_APPLE

27284

third-party-advisory

x_refsource_SECUNIA

30430

third-party-advisory

x_refsource_SECUNIA

USN-538-1

vendor-advisory

x_refsource_UBUNTU

APPLE-SA-2008-05-28

vendor-advisory

x_refsource_APPLE

20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.

mailing-list

x_refsource_BUGTRAQ

http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html

x_refsource_CONFIRM

30161

third-party-advisory

x_refsource_SECUNIA

GLSA-200805-07

vendor-advisory

x_refsource_GENTOO

DSA-1750

vendor-advisory

x_refsource_DEBIAN

20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.

mailing-list

x_refsource_FULLDISC

20080318 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues

mailing-list

x_refsource_BUGTRAQ

[security-announce] 20080317 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues

mailing-list

x_refsource_MLIST

http://docs.info.apple.com/article.html?artnum=307562

x_refsource_CONFIRM

http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html

x_refsource_CONFIRM

GLSA-200711-08

vendor-advisory

x_refsource_GENTOO

ADV-2008-0905

vdb-entry

x_refsource_VUPEN

http://www.vmware.com/security/advisories/VMSA-2008-0005.html

x_refsource_CONFIRM

ADV-2008-1697

vdb-entry

x_refsource_VUPEN

SSA:2007-325-01

vendor-advisory

x_refsource_SLACKWARE

20071112 FLEA-2007-0065-1 libpng

mailing-list

x_refsource_BUGTRAQ

http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm

x_refsource_CONFIRM

28276

vdb-entry

x_refsource_BID

20080304 CORE-2008-0124: Multiple vulnerabilities in Google's Android SDK

mailing-list

x_refsource_BUGTRAQ

ADV-2008-2466

vdb-entry

x_refsource_VUPEN

https://bugzilla.redhat.com/show_bug.cgi?id=337461

x_refsource_CONFIRM

27629

third-party-advisory

x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2007-5269

Description

Affected Products

References