CVE-2007-5269: libpng Improper Input Validation

CVSS: 5.0v2.0MediumModified

AliasesRHSA-2007:0992

Published 08-10-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-5269 is a medium (CVSS 5.0) Improper Input Validation vulnerability in libpng. EPSS estimates a 4.77% chance of exploitation in the next 30 days, higher than 91.8% of scored vulnerabilities.

Overall risk

21/100

0100

Low · default modelHow is this calculated?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

4.77%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

08-10-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL (png_handle_sCAL), (3) tEXt (png_push_read_tEXt), (4) iTXt (png_handle_iTXt), and (5) ztXT (png_handle_ztXt) chunking in PNG images, which trigger out-of-bounds read operations.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

4.77%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

0.00 pp

From 4.77% on 21-09-2026

21-09-202621-10-2026

EPSS score

4.77%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Redhat6 products

libpng< 2:1.0.14-11 | < 2:1.2.2-28 | < 2:1.2.7-3.el4_5.1 | < 2:1.2.10-7.1.el5_0.1
libpng-debuginfo< 2:1.2.2-28 | < 2:1.2.7-3.el4_5.1 | < 2:1.2.10-7.1.el5_0.1
libpng-devel< 2:1.0.14-11 | < 2:1.2.2-28 | < 2:1.2.7-3.el4_5.1 | < 2:1.2.10-7.1.el5_0.1
libpng10< 0:1.0.13-18 | < 0:1.0.16-3.el4_5.1
libpng10-debuginfo< 0:1.0.13-18 | < 0:1.0.16-3.el4_5.1

Show all 6

Libpng1 product

libpng≤ 1.2.20 | 1.0.28

2 vendors · 7 products

References

78 links

secunia.com/advisories/27965Third Party AdvisoryX Refsource SECUNIA
issues.rpath.com/browse/RPL-1814X Refsource CONFIRM
www.mandriva.com/security/advisories?name=MDKSA-2007:217Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/35386Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2007-October/msg00356.htmlVendor AdvisoryX Refsource FEDORA
security.gentoo.org/glsa/glsa-201209-25.xmlVendor AdvisoryX Refsource GENTOO
support.avaya.com/elmodocs2/security/ASA-2007-460.htmX Refsource CONFIRM
www.vmware.com/security/advisories/VMSA-2008-0014.htmlX Refsource CONFIRM
www.redhat.com/archives/fedora-package-announce/2007-October/msg00353.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/27093Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Show all 78 references

sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1Vendor AdvisoryX Refsource SUNALERT
www.vupen.com/english/advisories/2009/1560VDB EntryX Refsource VUPEN
secunia.com/advisories/34388Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2009/1462VDB EntryX Refsource VUPEN
secunia.com/advisories/27662Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31712Third Party AdvisoryX Refsource SECUNIA
bugs.gentoo.org/show_bug.cgi?id=195261X Refsource CONFIRM
www.redhat.com/archives/fedora-package-announce/2007-November/msg00072.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/27529Third Party AdvisoryX Refsource SECUNIA
www.vmware.com/support/server/doc/releasenotes_server.htmlX Refsource CONFIRM
secunia.com/advisories/27405Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27746Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2007-0992.htmlVendor AdvisoryX Refsource REDHAT
www.vupen.com/english/advisories/2007/3390VDB EntryX Refsource VUPEN
www.coresecurity.com?action=item&id=2148X Refsource MISC
sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/35302Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31713Third Party AdvisoryX Refsource SECUNIA
sourceforge.net/mailarchive/…Mailing ListX Refsource MLISTPatch
www.vmware.com/support/ace2/doc/releasenotes_ace2.htmlX Refsource CONFIRM
www.vupen.com/english/advisories/2008/0924/referencesVDB EntryX Refsource VUPEN
www.vmware.com/support/player2/doc/releasenotes_player2.htmlX Refsource CONFIRM
www.us-cert.gov/cas/techalerts/TA08-150A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
secunia.com/advisories/27391Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/25956VDB EntryX Refsource BID
www.novell.com/linux/security/advisories/2007_25_sr.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/27369Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id?1018849VDB EntryX Refsource SECTRACK
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10614VDB EntrySignatureX Refsource OVAL
bugzilla.redhat.com/show_bug.cgi?id=327791X Refsource CONFIRM
secunia.com/advisories/27492Third Party AdvisoryX Refsource SECUNIA
www.vmware.com/support/player/doc/releasenotes_player.htmlX Refsource CONFIRM
www.vmware.com/support/ws6/doc/releasenotes_ws6.htmlX Refsource CONFIRM
secunia.com/advisories/29420Third Party AdvisoryX Refsource SECUNIA
lists.apple.com/archives/security-announce/2008/Mar/msg00001.htmlVendor AdvisoryX Refsource APPLE
secunia.com/advisories/27284Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30430Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-538-1Vendor AdvisoryX Refsource UBUNTU
lists.apple.com/archives/security-announce/2008//May/msg00001.htmlVendor AdvisoryX Refsource APPLE
www.securityfocus.com/archive/1/495869/100/0/threadedMailing ListX Refsource BUGTRAQ
android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.htmlX Refsource CONFIRM
secunia.com/advisories/30161Third Party AdvisoryX Refsource SECUNIA
www.gentoo.org/security/en/glsa/glsa-200805-07.xmlVendor AdvisoryX Refsource GENTOO
www.debian.org/security/2009/dsa-1750Vendor AdvisoryX Refsource DEBIAN
lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.htmlMailing ListX Refsource FULLDISC
www.securityfocus.com/archive/1/489739/100/0/threadedMailing ListX Refsource BUGTRAQ
lists.vmware.com/pipermail/security-announce/2008/000008.htmlMailing ListX Refsource MLIST
docs.info.apple.com/article.html?artnum=307562X Refsource CONFIRM
www.vmware.com/support/ws55/doc/releasenotes_ws55.htmlX Refsource CONFIRM
www.gentoo.org/security/en/glsa/glsa-200711-08.xmlVendor AdvisoryX Refsource GENTOO
www.vupen.com/english/advisories/2008/0905/referencesVDB EntryX Refsource VUPEN
www.vmware.com/security/advisories/VMSA-2008-0005.htmlX Refsource CONFIRM
www.vupen.com/english/advisories/2008/1697VDB EntryX Refsource VUPEN
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.520323Vendor AdvisoryX Refsource SLACKWARE
www.securityfocus.com/archive/1/483582/100/0/threadedMailing ListX Refsource BUGTRAQ
support.avaya.com/elmodocs2/security/ASA-2009-208.htmX Refsource CONFIRM
www.securityfocus.com/bid/28276VDB EntryX Refsource BID
www.securityfocus.com/archive/1/489135/100/0/threadedMailing ListX Refsource BUGTRAQ
www.vupen.com/english/advisories/2008/2466VDB EntryX Refsource VUPEN
bugzilla.redhat.com/show_bug.cgi?id=337461X Refsource CONFIRM
secunia.com/advisories/27629Third Party AdvisoryX Refsource SECUNIA
access.redhat.com/errata/RHSA-2007:0992Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=324771REPORT
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0992.jsonAdvisory
access.redhat.com/security/cve/CVE-2007-5269REPORT
www.cve.org/CVERecord?id=CVE-2007-5269Advisory
nvd.nist.gov/vuln/detail/CVE-2007-5269Advisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities