CVE-2007-5503 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2007-5503
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-5503

Description: Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not properly handled by the read_png function.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/38771 UBUNTU http://www.ubuntulinux.org/support/documentation/usn/usn-550-1 http://www.ubuntulinux.org/support/documentation/usn/usn-550-2 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html ST 1019027 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.362119 SAID Secunia Advisory: SA27819 Secunia Advisory: SA27775 Secunia Advisory: SA27887 Secunia Advisory: SA27985 Secunia Advisory: SA28289 Secunia Advisory: SA28476 Secunia Advisory: SA28529 Secunia Advisory: SA28555 Secunia Advisory: SA28838 Secunia Advisory: SA27880 Secunia Advisory: SA29767 Secunia Advisory: SA31707 Secunia Advisory: SA31711 REDHAT http://rhn.redhat.com/errata/RHSA-2007-1078.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11251 MISC http://bugs.gentoo.org/show_bug.cgi?id=201860 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:019 GENTOO http://security.gentoo.org/glsa/glsa-201209-25.xml http://www.gentoo.org/security/en/glsa/glsa-200712-24.xml http://security.gentoo.org/glsa/glsa-200712-04.xml FULLDISC http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html FEDORA DEBIAN http://www.debian.org/security/2008/dsa-1542 CONFIRM http://www.vmware.com/security/advisories/VMSA-2008-0014.html http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html http://www.vmware.com/support/server/doc/releasenotes_server.html http://www.vmware.com/support/player2/doc/releasenotes_player2.html http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0015 http://bugs.gentoo.org/show_bug.cgi?id=200350 http://gitweb.freedesktop.org/?p=cairo;a=commitdiff_plain;h=6020f67f1a49cfe3844c4938d4af24c63c8424cc;hp=c79fc9af334fd6f2d1078071d64178125561b187 http://gitweb.freedesktop.org/?p=cairo;a=commitdiff;h=5c7d2d14d78e4dfb1ef6d2c40f0910f177e07360 http://gitweb.freedesktop.org/?p=cairo;a=commitdiff;h=e49bcde27f88e21d5b8037a0089a226096f6514b BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/495869/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/486405/100/0/threaded BID 26650

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability