NVD Vulnerability Detail

CVE-2007-5269

Summary	Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL (png_handle_sCAL), (3) tEXt (png_push_read_tEXt), (4) iTXt (png_handle_iTXt), and (5) ztXT (png_handle_ztXt) chunking in PNG images, which trigger out-of-bounds read operations.
Publication Date	Oct. 9, 2007, 6:17 a.m.
Registration Date	Jan. 29, 2021, 2:21 p.m.
Last Update	Oct. 16, 2018, 6:42 a.m.

CVSS2.0 : MEDIUM
Score	5.0
Vector	AV:N/AC:L/Au:N/C:N/I:N/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:libpng:libpng:1.0.28:::::::*
cpe:2.3:a:libpng:libpng::::::::		1.2.20

Related information, measures and tools

No	URL	refsource	タグ
1	http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html	CONFIRM
2	http://bugs.gentoo.org/show_bug.cgi?id=195261	CONFIRM
3	http://docs.info.apple.com/article.html?artnum=307562	CONFIRM
4	http://lists.apple.com/archives/security-announce/2008//May/msg00001.html	APPLE
5	http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html	APPLE
6	http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html	FULLDISC
7	http://lists.vmware.com/pipermail/security-announce/2008/000008.html	MLIST
8	http://secunia.com/advisories/27093	SECUNIA	Vendor Advisory
9	http://secunia.com/advisories/27284	SECUNIA
10	http://secunia.com/advisories/27369	SECUNIA
11	http://secunia.com/advisories/27391	SECUNIA
12	http://secunia.com/advisories/27405	SECUNIA
13	http://secunia.com/advisories/27492	SECUNIA
14	http://secunia.com/advisories/27529	SECUNIA
15	http://secunia.com/advisories/27629	SECUNIA
16	http://secunia.com/advisories/27662	SECUNIA
17	http://secunia.com/advisories/27746	SECUNIA
18	http://secunia.com/advisories/27965	SECUNIA
19	http://secunia.com/advisories/29420	SECUNIA
20	http://secunia.com/advisories/30161	SECUNIA
21	http://secunia.com/advisories/30430	SECUNIA
22	http://secunia.com/advisories/31712	SECUNIA
23	http://secunia.com/advisories/31713	SECUNIA
24	http://secunia.com/advisories/34388	SECUNIA
25	http://secunia.com/advisories/35302	SECUNIA
26	http://secunia.com/advisories/35386	SECUNIA
27	http://security.gentoo.org/glsa/glsa-201209-25.xml	GENTOO
28	http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.520323	SLACKWARE
29	http://sourceforge.net/mailarchive/forum.php?thread_name=3.0.6.32.20071004082318.012a7628%40mail.comcast.net&forum_name=png-mng-implement	MLIST	Patch
30	http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1	SUNALERT
31	http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1	SUNALERT
32	http://support.avaya.com/elmodocs2/security/ASA-2007-460.htm	CONFIRM
33	http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm	CONFIRM
34	http://www.coresecurity.com/?action=item&id=2148	MISC
35	http://www.debian.org/security/2009/dsa-1750	DEBIAN
36	http://www.gentoo.org/security/en/glsa/glsa-200711-08.xml	GENTOO
37	http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml	GENTOO
38	http://www.mandriva.com/security/advisories?name=MDKSA-2007:217	MANDRIVA
39	http://www.novell.com/linux/security/advisories/2007_25_sr.html	SUSE
40	http://www.redhat.com/support/errata/RHSA-2007-0992.html	REDHAT
41	http://www.securityfocus.com/archive/1/483582/100/0/threaded	BUGTRAQ
42	http://www.securityfocus.com/archive/1/489135/100/0/threaded	BUGTRAQ
43	http://www.securityfocus.com/archive/1/489739/100/0/threaded	BUGTRAQ
44	http://www.securityfocus.com/archive/1/495869/100/0/threaded	BUGTRAQ
45	http://www.securityfocus.com/bid/25956	BID
46	http://www.securityfocus.com/bid/28276	BID
47	http://www.securitytracker.com/id?1018849	SECTRACK
48	http://www.ubuntu.com/usn/usn-538-1	UBUNTU
49	http://www.us-cert.gov/cas/techalerts/TA08-150A.html	CERT	US Government Resource
50	http://www.vmware.com/security/advisories/VMSA-2008-0005.html	CONFIRM
51	http://www.vmware.com/security/advisories/VMSA-2008-0014.html	CONFIRM
52	http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html	CONFIRM
53	http://www.vmware.com/support/player/doc/releasenotes_player.html	CONFIRM
54	http://www.vmware.com/support/player2/doc/releasenotes_player2.html	CONFIRM
55	http://www.vmware.com/support/server/doc/releasenotes_server.html	CONFIRM
56	http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html	CONFIRM
57	http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html	CONFIRM
58	http://www.vupen.com/english/advisories/2007/3390	VUPEN
59	http://www.vupen.com/english/advisories/2008/0905/references	VUPEN
60	http://www.vupen.com/english/advisories/2008/0924/references	VUPEN
61	http://www.vupen.com/english/advisories/2008/1697	VUPEN
62	http://www.vupen.com/english/advisories/2008/2466	VUPEN
63	http://www.vupen.com/english/advisories/2009/1462	VUPEN
64	http://www.vupen.com/english/advisories/2009/1560	VUPEN
65	https://bugzilla.redhat.com/show_bug.cgi?id=327791	CONFIRM
66	https://bugzilla.redhat.com/show_bug.cgi?id=337461	CONFIRM
67	https://issues.rpath.com/browse/RPL-1814	CONFIRM
68	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10614	OVAL
69	https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00072.html	FEDORA
70	https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00353.html	FEDORA
71	https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00356.html	FEDORA

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-20	不適切な入力確認	https://cwe.mitre.org/data/definitions/20.html

JVN Vulnerability Information

libpng の複数のチャンクハンドラにおけるサービス運用妨害 (DoS) の脆弱性

Title	libpng の複数のチャンクハンドラにおけるサービス運用妨害 (DoS) の脆弱性
Summary	libpng には、複数のチャンクハンドラに不備が存在するために、不正な PNG イメージを取り扱った際にサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 pCAL (png_handle_pCAL() 関数) sCAL (png_handle_sCAL() 関数) tEXt (png_push_read_tEXt() 関数) iTXt (png_handle_iTXt() 関数) ztXT (png_handle_ztXt() 関数)
Possible impacts	第三者により、libpng を使用するプログラムをサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。(libpng 1.2.21 以降で対応済) ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Oct. 8, 2007, midnight
Registration Date	Nov. 8, 2007, 3:33 p.m.
Last Update	April 18, 2012, 5:57 p.m.

Affected System

サン・マイクロシステムズ

OpenSolaris (sparc)

OpenSolaris (x86)

Sun Solaris 10 (sparc)

Sun Solaris 10 (x86)

Sun Solaris 9 (sparc)

Sun Solaris 9 (x86)

レッドハット

Red Hat Enterprise Linux 2.1 (as)

Red Hat Enterprise Linux 2.1 (es)

Red Hat Enterprise Linux 2.1 (ws)

Red Hat Enterprise Linux 3 (as)

Red Hat Enterprise Linux 3 (es)

Red Hat Enterprise Linux 3 (ws)

Red Hat Enterprise Linux 4 (as)

Red Hat Enterprise Linux 4 (es)

Red Hat Enterprise Linux 4 (ws)

Red Hat Enterprise Linux 5 (server)

Red Hat Enterprise Linux Desktop 3.0

Red Hat Enterprise Linux Desktop 4.0

Red Hat Enterprise Linux Desktop 5.0 (client)

Red Hat Linux Advanced Workstation 2.1

RHEL Desktop Workstation 5 (client)

サイバートラスト株式会社

Asianux Server 2.0

Asianux Server 2.1

Asianux Server 3 (x86)

Asianux Server 3 (x86-64)

Asianux Server 3.0

Asianux Server 3.0 (x86-64)

Asianux Server 4.0

Asianux Server 4.0 (x86-64)

アップル

Apple Mac OS X v10.5.3 未満

Apple Mac OS X Server v10.5.3 未満

PNG Development Group

libpng 1.2.20 およびそれ以前

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2007-5269	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5269
National Vulnerability Database (NVD)
2	CVE-2007-5269	http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-5269

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-20	https://jvndb.jvn.jp/ja/cwe/CWE-20.html

ベンダー情報

No	Name	URL
Apple Security Updates
1	Security Update 2008-002	http://support.apple.com/kb/HT1249
2	Security Update 2008-003	http://support.apple.com/kb/HT1897
Apple セキュリティアップデート
3	Security Update 2008-002	http://support.apple.com/kb/HT1249?viewlocale=ja_JP&locale=ja_JP
4	Security Update 2008-003	http://support.apple.com/kb/HT1897?locale=ja_JP
Asianux Technical Support Network
5	libpng-1.2.10-7.1.1	https://tsn.miraclelinux.com/tsn_local/index.php?m=errata&a=detail&eid=47
libpng.org
6	Top Page	http://www.libpng.org/pub/png/libpng.html
MIRACLE LINUX アップデート情報
7	1151	http://www.miraclelinux.com/support/index.php?q=node/99&errata_id=1151
Red Hat Security Advisory
8	RHSA-2007:0992	http://rhn.redhat.com/errata/RHSA-2007-0992.html
SECURITY BLOG
9	Multiple Denial of Service vulnerabilities in libpng	https://blogs.oracle.com/sunsecurity/entry/multiple_denial_of_service_vulnerabilities6
Sun Alert Notification
10	259989	http://download.oracle.com/sunalerts/1020521.1.html
レッドハットセキュリティーアップデート
11	RHSA-2007:0992	http://www.jp.redhat.com/support/errata/RHSA/RHSA-2007-0992J.html

その他

No	Name	URL
FrSIRT Advisories
1	FrSIRT/ADV-2007-3390	http://www.frsirt.com/english/advisories/2007/3390
JVN
2	JVNTA08-079A	http://jvn.jp/cert/JVNTA08-079A/index.html
3	JVNTA08-150A	http://jvn.jp/cert/JVNTA08-150A/
JVN Status Tracking Notes
4	TRTA08-079A	http://jvn.jp/tr/TRTA08-079A/index.html
5	TRTA08-150A	http://jvn.jp/tr/TRTA08-150A/index.html
Secunia Advisory
6	SA27093	http://secunia.com/advisories/27093
SecurityFocus
7	25956	http://www.securityfocus.com/bid/25956
SecurityTracker
8	1018849	http://www.securitytracker.com/id?1018849
US-CERT Cyber Security Alerts
9	SA08-079A	http://www.us-cert.gov/cas/alerts/SA08-079A.html
10	SA08-150A	http://www.us-cert.gov/cas/alerts/SA08-150A.html
US-CERT Technical Cyber Security Alert
11	TA08-079A	http://www.us-cert.gov/cas/techalerts/TA08-079A.html
12	TA08-150A	http://www.us-cert.gov/cas/techalerts/TA08-150A.html

Change Log

No	Changed Details	Date of change
0	[2007年11月08日] 掲載 [2007年12月05日] 影響を受けるシステム：ミラクル・リナックス (libpng-1.2.10-7.1.1) の情報追加。ベンダ情報: ミラクル・リナックス (libpng-1.2.10-7.1.1) 追加。 [2008年04月01日] 影響を受けるシステム：アップル (Security Update 2008-002) の情報追加。ベンダ情報: アップル (Security Update 2008-002) 追加。 [2008年06月18日] 影響を受けるシステム：アップル (Security Update 2008-003) の情報を追加ベンダ情報：アップル (Security Update 2008-003) を追加 [2009年07月02日] 影響を受けるシステム：サン・マイクロシステムズ (259989) の情報を追加ベンダ情報：サン・マイクロシステムズ (259989) を追加 [2012年04月18日] ベンダ情報：オラクル (Multiple Denial of Service vulnerabilities in libpng) を追加	Feb. 17, 2018, 10:37 a.m.