CVE-2007-5503 Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not pro...
MediumCVSS 6.8
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not properly handled by the read_png function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat cairo | <= 1.4.10 | No fix listed |
References
- bugs.gentoo.org
- bugs.gentoo.org
- gitweb.freedesktop.org
- gitweb.freedesktop.org
- gitweb.freedesktop.org
- 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues. mailing-list
- SUSE-SR:2008:003 vendor-advisory
- RHSA-2007:1078 patch vendor-advisory
- 27775 third-party-advisory vendor-advisory
- 27819 third-party-advisory vendor-advisory
- 27880 third-party-advisory vendor-advisory
- 27887 third-party-advisory vendor-advisory
- 27985 third-party-advisory vendor-advisory
- 28289 third-party-advisory vendor-advisory
- 28476 third-party-advisory vendor-advisory
- 28529 third-party-advisory vendor-advisory
- 28555 third-party-advisory vendor-advisory
- 28838 third-party-advisory vendor-advisory
- 29767 third-party-advisory vendor-advisory
- 31707 third-party-advisory vendor-advisory
- 31711 third-party-advisory vendor-advisory
- GLSA-200712-04 vendor-advisory
- GLSA-201209-25 vendor-advisory
- SSA:2007-337-01 vendor-advisory
- wiki.rpath.com
- DSA-1542 vendor-advisory
- GLSA-200712-24 vendor-advisory
- MDVSA-2008:019 vendor-advisory
- 20080115 rPSA-2008-0015-1 cairo mailing-list
- 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues. mailing-list
- 26650 vdb-entry
- 1019027 vdb-entry
- www.vmware.com
- www.vmware.com
- www.vmware.com
- www.vmware.com
- ADV-2007-4045 vdb-entry vendor-advisory
- ADV-2008-2466 vdb-entry vendor-advisory
- bugzilla.redhat.com
- cario-readpng-bo(38771) vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:11251 signature vdb-entry
- USN-550-1 vendor-advisory
- USN-550-2 vendor-advisory
- FEDORA-2007-3818 vendor-advisory