CVE-2007-5269

Published: Oct 8, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL (png_handle_sCAL), (3) tEXt (png_push_read_tEXt), (4) iTXt (png_handle_iTXt), and (5) ztXT (png_handle_ztXt) chunking in PNG images, which trigger out-of-bounds read operations.

Affected (2)

Products: Libpng: Libpng

Libpng

1 product

Libpng

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Libpng Libpng	Up to 1.2.20
Libpng Libpng	Version 1.0.28

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (142)

http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html

Source: cve@mitre.org

http://bugs.gentoo.org/show_bug.cgi?id=195261

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=307562

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2008//May/msg00001.html

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html

Source: cve@mitre.org

http://lists.vmware.com/pipermail/security-announce/2008/000008.html

Source: cve@mitre.org

http://secunia.com/advisories/27093

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27284

Source: cve@mitre.org

http://secunia.com/advisories/27369

Source: cve@mitre.org

http://secunia.com/advisories/27391

Source: cve@mitre.org

http://secunia.com/advisories/27405

Source: cve@mitre.org

http://secunia.com/advisories/27492

Source: cve@mitre.org

http://secunia.com/advisories/27529

Source: cve@mitre.org

http://secunia.com/advisories/27629

Source: cve@mitre.org

http://secunia.com/advisories/27662

Source: cve@mitre.org

http://secunia.com/advisories/27746

Source: cve@mitre.org

http://secunia.com/advisories/27965

Source: cve@mitre.org

http://secunia.com/advisories/29420

Source: cve@mitre.org

http://secunia.com/advisories/30161

Source: cve@mitre.org

http://secunia.com/advisories/30430

Source: cve@mitre.org

http://secunia.com/advisories/31712

Source: cve@mitre.org

http://secunia.com/advisories/31713

Source: cve@mitre.org

http://secunia.com/advisories/34388

Source: cve@mitre.org

http://secunia.com/advisories/35302

Source: cve@mitre.org

http://secunia.com/advisories/35386

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-201209-25.xml

Source: cve@mitre.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.520323

Source: cve@mitre.org

http://sourceforge.net/mailarchive/forum.php?thread_name=3.0.6.32.20071004082318.012a7628%40mail.comcast.net&forum_name=png-mng-implement

Source: cve@mitre.org

Patch

http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2007-460.htm

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm

Source: cve@mitre.org

http://www.coresecurity.com/?action=item&id=2148

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1750

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200711-08.xml

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:217

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_25_sr.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0992.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/483582/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/489135/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/489739/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/495869/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/25956

Source: cve@mitre.org

http://www.securityfocus.com/bid/28276

Source: cve@mitre.org

http://www.securitytracker.com/id?1018849

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-538-1

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA08-150A.html

Source: cve@mitre.org

US Government Resource

http://www.vmware.com/security/advisories/VMSA-2008-0005.html

Source: cve@mitre.org

http://www.vmware.com/security/advisories/VMSA-2008-0014.html

Source: cve@mitre.org

http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html

Source: cve@mitre.org

http://www.vmware.com/support/player/doc/releasenotes_player.html

Source: cve@mitre.org

http://www.vmware.com/support/player2/doc/releasenotes_player2.html

Source: cve@mitre.org

http://www.vmware.com/support/server/doc/releasenotes_server.html

Source: cve@mitre.org

http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html

Source: cve@mitre.org

http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3390

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0905/references

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0924/references

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1697

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2466

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/1462

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/1560

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=327791

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=337461

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-1814

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10614

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00072.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00353.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00356.html

Source: cve@mitre.org

http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html