CVE-2007-5268
- State
- Published
- Severity
- Not scored
- Published
- Oct 8, 2007
- Updated
- Aug 7, 2024
- Reserved
- Oct 8, 2007
Description
pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise operations and (2) incorrect comparisons, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG image.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://issues.rpath.com/browse/RPL-1814
- MDKSA-2007:217vendor-advisory
- 35386third-party-advisory
- 27093third-party-advisory
- 1020521vendor-advisory
- ADV-2009-1560vdb-entry
- ADV-2009-1462vdb-entry
- http://bugs.gentoo.org/show_bug.cgi?id=195261
- 27529third-party-advisory
- 27405third-party-advisory
- 27746third-party-advisory
- ADV-2007-3390vdb-entry
- http://www.coresecurity.com/?action=item&id=2148
- 259989vendor-advisory
- 35302third-party-advisory
- [png-mng-implement] 20071004 Libpng-1.2.21 and libpng-1.0.29 releasedmailing-list
- ADV-2008-0924vdb-entry
- TA08-150Athird-party-advisory
- 25956vdb-entry
- 29420third-party-advisory
- APPLE-SA-2008-03-18vendor-advisory
- 27284third-party-advisory
- 30430third-party-advisory
- USN-538-1vendor-advisory
- APPLE-SA-2008-05-28vendor-advisory
- http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html
- 30161third-party-advisory
- GLSA-200805-07vendor-advisory
- [png-mng-implement] 20070914 libpng-1.0.29beta1 and libpng-1.2.21beta1mailing-list
- http://docs.info.apple.com/article.html?artnum=307562
- GLSA-200711-08vendor-advisory
- [png-mng-implement] 20070911 FW: Compiler warnings for pngrtran.cmailing-list
- ADV-2008-1697vdb-entry
- SSA:2007-325-01vendor-advisory
- 20071112 FLEA-2007-0065-1 libpngmailing-list
- http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm
- 20080304 CORE-2008-0124: Multiple vulnerabilities in Google's Android SDKmailing-list
- 27629third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.