Vulnerability DatabaseCVE-2007-5503
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2007-5503
November 30, 2007
Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not properly handled by the read_png function.
Related Resources (46)
http://www.securityfocus.com/bid/26650
http://secunia.com/advisories/27775
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0015
http://secunia.com/advisories/28476
https://exchange.xforce.ibmcloud.com/vulnerabilities/38771
http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html
http://gitweb.freedesktop.org/?p=cairo%3Ba=commitdiff%3Bh=5c7d2d14d78e4dfb1ef6d2c40f0910f177e07360
http://rhn.redhat.com/errata/RHSA-2007-1078.html
http://www.mandriva.com/security/advisories?name=MDVSA-2008:019
https://bugzilla.redhat.com/show_bug.cgi?id=387431
http://gitweb.freedesktop.org/?p=cairo%3Ba=commitdiff%3Bh=e49bcde27f88e21d5b8037a0089a226096f6514b
https://access.redhat.com/security/cve/CVE-2007-5503
https://usn.ubuntu.com/550-1/
https://issues.rpath.com/browse/RPL-1966
http://secunia.com/advisories/27887
http://secunia.com/advisories/31707
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html
http://www.securityfocus.com/archive/1/486405/100/0/threaded
http://secunia.com/advisories/29767
http://secunia.com/advisories/27819
http://secunia.com/advisories/28289
http://secunia.com/advisories/27880
http://www.securityfocus.com/archive/1/495869/100/0/threaded
http://secunia.com/advisories/28529
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html
http://secunia.com/advisories/27985
https://usn.ubuntu.com/550-2/
http://secunia.com/advisories/28838
http://www.gentoo.org/security/en/glsa/glsa-200712-24.xml
http://www.debian.org/security/2008/dsa-1542
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11251
http://bugs.gentoo.org/show_bug.cgi?id=200350
http://www.vupen.com/english/advisories/2007/4045
http://www.vmware.com/support/player2/doc/releasenotes_player2.html
http://security.gentoo.org/glsa/glsa-201209-25.xml
http://www.securitytracker.com/id?1019027
http://www.vmware.com/support/server/doc/releasenotes_server.html
http://secunia.com/advisories/31711
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00630.html
http://secunia.com/advisories/28555
http://www.vmware.com/security/advisories/VMSA-2008-0014.html
http://www.vupen.com/english/advisories/2008/2466
http://security.gentoo.org/glsa/glsa-200712-04.xml
http://gitweb.freedesktop.org/?p=cairo%3Ba=commitdiff_plain%3Bh=6020f67f1a49cfe3844c4938d4af24c63c8424cc%3Bhp=c79fc9af334fd6f2d1078071d64178125561b187
http://bugs.gentoo.org/show_bug.cgi?id=201860
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.362119
Do you need more information?
Contact Us
CVSS v4
Base Score:
6.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
Vulnerable System Confidentiality
LOW
Vulnerable System Integrity
LOW
Vulnerable System Availability
LOW
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
5.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW
CVSS v2
Base Score:
6.8
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
EPSS
Base Score:
10.39