PT-2007-1119 · Libpng · Libpng
Publicado
2007-10-08
·
Atualizado
2018-10-26
·
CVE-2007-5268
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions:
libpng versions prior to 1.0.29
libpng versions 1.2.x prior to 1.2.21
Description:
The issue is related to the use of logical instead of bitwise operations and incorrect comparisons in the pngrtran.c file of libpng. This might allow remote attackers to cause a denial of service via a crafted PNG image. Multiple vulnerabilities in the libpng package can lead to disruption of protected information availability, and exploitation can be done remotely.
Recommendations:
For libpng versions prior to 1.0.29, update to version 1.0.29 or later.
For libpng versions 1.2.x prior to 1.2.21, update to version 1.2.21 or later.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Libpng