CVE-2007-5269
Fixed in a distro release EPSS 5%
Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL (png_handle_sCAL), (3) tEXt (png_push_read_tEXt), (4) iTXt (png_handle_iTXt), and (5) ztXT (png_handle_ztXt) chunking in PNG images, which trigger out-of-bounds read operations.
Products: libpng
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 2.1 | libpng | 2:1.0.14-11 |
| Red Hat Enterprise Linux 2.1 | libpng-devel | 2:1.0.14-11 |
| Red Hat Enterprise Linux 3 | libpng | 2:1.2.2-28 |
| Red Hat Enterprise Linux 3 | libpng-debuginfo | 2:1.2.2-28 |
| Red Hat Enterprise Linux 3 | libpng-devel | 2:1.2.2-28 |
| Red Hat Enterprise Linux 3 | libpng10 | 0:1.0.13-18 |
| Red Hat Enterprise Linux 3 | libpng10-debuginfo | 0:1.0.13-18 |
| Red Hat Enterprise Linux 3 | libpng10-devel | 0:1.0.13-18 |
| Red Hat Enterprise Linux 4 | libpng | 2:1.2.7-3.el4_5.1 |
| Red Hat Enterprise Linux 4 | libpng-debuginfo | 2:1.2.7-3.el4_5.1 |
| Red Hat Enterprise Linux 4 | libpng-devel | 2:1.2.7-3.el4_5.1 |
| Red Hat Enterprise Linux 4 | libpng10 | 0:1.0.16-3.el4_5.1 |
| Red Hat Enterprise Linux 4 | libpng10-debuginfo | 0:1.0.16-3.el4_5.1 |
| Red Hat Enterprise Linux 4 | libpng10-devel | 0:1.0.16-3.el4_5.1 |
| Red Hat Enterprise Linux 5 | libpng | 2:1.2.10-7.1.el5_0.1 |
| Red Hat Enterprise Linux 5 | libpng-debuginfo | 2:1.2.10-7.1.el5_0.1 |
| Red Hat Enterprise Linux 5 | libpng-devel | 2:1.2.10-7.1.el5_0.1 |