Off-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng before 1.0.29 beta1 and 1.2.x before 1.2.…

Exploit prediction (EPSS)

3.42% probability of exploitation in the next 30 days, higher than 89% of all scored CVEs.

CVSS scores

Classification

Weakness

• CWE-189 Numeric Errors

References

• issues.rpath.com /browse/RPL-1814 · x_refsource_CONFIRM, x_transferred
• mandriva.com /security/advisories?name=MDKSA-2007:217 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
• secunia.com /advisories/35386 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• sourceforge.net /mailarchive/forum.php?thread_name=5122753600C3E94F87FBDFFCC090D1FF0400EA68%40MERCMBX07.na · mailing-list, x_refsource_MLIST, x_transferred
• sunsolve.sun.com /search/document.do?assetkey=1-77-1020521.1-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
• vupen.com /english/advisories/2009/1560 · vdb-entry, x_refsource_VUPEN, x_transferred
• vupen.com /english/advisories/2009/1462 · vdb-entry, x_refsource_VUPEN, x_transferred
• bugs.gentoo.org /show_bug.cgi?id=195261 · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/27529 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/27746 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• coresecurity.com /?action=item&id=2148 · x_refsource_MISC, x_transferred
• sunsolve.sun.com /search/document.do?assetkey=1-66-259989-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
• secunia.com /advisories/35302 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• vupen.com /english/advisories/2008/0924/references · vdb-entry, x_refsource_VUPEN, x_transferred
• us-cert.gov /cas/techalerts/TA08-150A.html · third-party-advisory, x_refsource_CERT, x_transferred
• secunia.com /advisories/29420 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• lists.apple.com /archives/security-announce/2008/Mar/msg00001.html · vendor-advisory, x_refsource_APPLE, x_transferred
• secunia.com /advisories/27284 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/30430 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• lists.apple.com /archives/security-announce/2008//May/msg00001.html · vendor-advisory, x_refsource_APPLE, x_transferred
• android-developers.blogspot.com /2008/03/android-sdk-update-m5-rc15-released.html · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/30161 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• gentoo.org /security/en/glsa/glsa-200805-07.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
• sourceforge.net /mailarchive/message.php?msg_name=e56ccc8f0709140846k24e9a040r81623783b6b1c00f%40mail.gmai · mailing-list, x_refsource_MLIST, x_transferred
• docs.info.apple.com /article.html?artnum=307562 · x_refsource_CONFIRM, x_transferred
• gentoo.org /security/en/glsa/glsa-200711-08.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
• vupen.com /english/advisories/2008/1697 · vdb-entry, x_refsource_VUPEN, x_transferred
• slackware.com /security/viewer.php?l=slackware-security&y=2007&m=slackware-security.520323 · vendor-advisory, x_refsource_SLACKWARE, x_transferred
• securityfocus.com /archive/1/483582/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
• support.avaya.com /elmodocs2/security/ASA-2009-208.htm · x_refsource_CONFIRM, x_transferred
• securityfocus.com /bid/25957 · vdb-entry, x_refsource_BID, x_transferred
• securityfocus.com /archive/1/489135/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
• secunia.com /advisories/27629 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

• CVE List: CVE-2007-5266
• NVD: CVE-2007-5266

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.