CVE-2007-2445
- State
- Published
- Severity
- Not scored
- Published
- May 16, 2007
- Updated
- Aug 7, 2024
- Reserved
- May 2, 2007
Description
The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to cause a denial of service (application crash) via a grayscale PNG image with a bad tRNS chunk CRC value.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- OpenPKG-SA-2007.013vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2007-254.htm
- SSA:2007-136-01vendor-advisory
- 25571third-party-advisory
- oval:org.mitre.oval:def:10094vdb-entrysignature
- VU#684664third-party-advisory
- DSA-1613vendor-advisory
- 102987vendor-advisory
- 200871vendor-advisory
- 34388third-party-advisory
- 36196vdb-entry
- GLSA-200705-24vendor-advisory
- 25273third-party-advisory
- http://www.coresecurity.com/?action=item&id=2148
- http://www.mirrorservice.org/sites/download.sourceforge.net/pub/sourceforge/l/li/libpng/libpng-1.2.17-ADVISORY.txt
- 24023vdb-entry
- libpng-trns-chunk-dos(34340)vdb-entry
- ADV-2008-0924vdb-entry
- http://irrlicht.sourceforge.net/changes.txt
- 25867third-party-advisory
- http://sourceforge.net/project/shownotes.php?release_id=508653&group_id=5624
- 31168third-party-advisory
- https://issues.rpath.com/browse/RPL-1381
- 25329third-party-advisory
- 25461third-party-advisory
- ADV-2007-1838vdb-entry
- 29420third-party-advisory
- ADV-2007-2385vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=508656&group_id=5624
- APPLE-SA-2008-03-18vendor-advisory
- 25353third-party-advisory
- http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html
- 20070517 FLEA-2007-0018-1: libpngmailing-list
- 30161third-party-advisory
- GLSA-200805-07vendor-advisory
- 25554third-party-advisory
- 25268third-party-advisory
- DSA-1750vendor-advisory
- 1018078vdb-entry
- 2007-0019vendor-advisory
- SUSE-SR:2007:013vendor-advisory
- USN-472-1vendor-advisory
- 27056third-party-advisory
- RHSA-2007:0356vendor-advisory
- 25292third-party-advisory
- http://docs.info.apple.com/article.html?artnum=307562
- 25787third-party-advisory
- 25742third-party-advisory
- MDKSA-2007:116vendor-advisory
- 24000vdb-entry
- 20080304 CORE-2008-0124: Multiple vulnerabilities in Google's Android SDKmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.