Unscored severity · published Oct 8, 2007
CVE-2007-5268
pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise operations and (2) incorrect comparisons, which might allow remote attackers to cause…
–
CVSS
3.1%
EPSS
No
On KEV
Description
pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise operations and (2) incorrect comparisons, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG image.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libpng · Libpng
before 1.0.29; 1.2.0 before 1.2.21 · source: NVD
UL
Ubuntu Linux · Canonical
6.06; 6.10; 7.04; 7.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5268
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5268
Third Party Advisory
http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html
Third Party Advisory
http://bugs.gentoo.org/show_bug.cgi?id=195261
Third Party Advisory
http://docs.info.apple.com/article.html?artnum=307562
Mailing List
http://lists.apple.com/archives/security-announce/2008//May/msg00001.html
Mailing List
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
Third Party Advisory
http://secunia.com/advisories/27093
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation