Bug 324751 (CVE-2007-5268)

Summary:	CVE-2007-5268 libpng possible DoS / crash
Product:	[Other] Security Response	Reporter:	Tomas Hoger <thoger>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	tgl
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
URL:	http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-5268
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-10-16 09:49:12 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Tomas Hoger 2007-10-09 11:57:46 UTC

Common Vulnerabilities and Exposures assigned an identifier CVE-2007-5268 to the following vulnerability:

pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1)
logical instead of bitwise operations and (2) incorrect comparisons,
which might allow remote attackers to cause a denial of service
(crash) via a crafted PNG image.

References:
http://secunia.com/advisories/27093
http://www.frsirt.com/english/advisories/2007/3390
http://sourceforge.net/mailarchive/message.php?msg_name=e56ccc8f0709140846k24e9a040r81623783b6b1c00f%40mail.gmail.com
http://sourceforge.net/mailarchive/forum.php?thread_name=3.0.6.32.20071004082318.012a7628%40mail.comcast.net&forum_name=png-mng-implement
http://sourceforge.net/mailarchive/message.php?msg_name=5122753600C3E94F87FBDFFCC090D1FF0400EBC5%40MERCMBX07.na.sas.com

Comment 2 Tomas Hoger 2007-10-16 09:49:12 UTC

Described problems were introduced in libpng version 1.2.19.  No version of
libpng currently shipped in Red Hat Enterprise Linux or Fedora is affected by
this problem.