CVE-2007-5268: Medium severity libpng LIBPNG vulnerability
pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise operations and (2) incorrect comparisons, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG image.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5268?
CVE-2007-5268 has a severity rating that indicates a denial of service vulnerability, which can lead to application crashes.
How do I fix CVE-2007-5268?
To fix CVE-2007-5268, upgrade to libpng version 1.0.29 or 1.2.21 or later.
What software is affected by CVE-2007-5268?
CVE-2007-5268 affects libpng versions before 1.0.29 and 1.2.x versions before 1.2.21, as well as several versions of Ubuntu Linux using these vulnerable versions.
What type of attack does CVE-2007-5268 enable?
CVE-2007-5268 allows remote attackers to cause a denial of service by manipulating crafted PNG images.
Is CVE-2007-5268 still a concern for users today?
While CVE-2007-5268 is an older vulnerability, users of affected versions of libpng or operating systems should take it seriously and apply updates.