FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2007-2445

This CVE name corresponds to:

Entered	Topic
2007-05-16	png -- DoS crash vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2007-2445 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2007-2445
Phase	Assigned(20070502)

Description

The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to cause a denial of service (application crash) via a grayscale PNG image with a bad tRNS chunk CRC value.

References

Source	Reference
BUGTRAQ	20070517 FLEA-2007-0018-1: libpng
BUGTRAQ	20080304 CORE-2008-0124: Multiple vulnerabilities in Google's Android SDK
MISC	http://www.coresecurity.com/?action=item&id=2148
CONFIRM	http://sourceforge.net/project/shownotes.php?release_id=508653&group_id=5624
CONFIRM	http://sourceforge.net/project/shownotes.php?release_id=508656&group_id=5624
CONFIRM	http://www.mirrorservice.org/sites/download.sourceforge.net/pub/sourceforge/l/li/libpng/libpng-1.2.17-ADVISORY.txt
CONFIRM	https://issues.rpath.com/browse/RPL-1381
CONFIRM	http://support.avaya.com/elmodocs2/security/ASA-2007-254.htm
CONFIRM	http://irrlicht.sourceforge.net/changes.txt
CONFIRM	http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html
CONFIRM	http://docs.info.apple.com/article.html?artnum=307562
APPLE	APPLE-SA-2008-03-18
DEBIAN	DSA-1613
DEBIAN	DSA-1750
GENTOO	GLSA-200705-24
GENTOO	GLSA-200805-07
MANDRIVA	MDKSA-2007:116
OPENPKG	OpenPKG-SA-2007.013
REDHAT	RHSA-2007:0356
SLACKWARE	SSA:2007-136-01
SUNALERT	102987
SUNALERT	200871
SUSE	SUSE-SR:2007:013
TRUSTIX	2007-0019
UBUNTU	USN-472-1
CERT-VN	VU#684664
BID	24000
BID	24023
OSVDB	36196
OVAL	oval:org.mitre.oval:def:10094
SECUNIA	34388
VUPEN	ADV-2007-1838
VUPEN	ADV-2007-2385
VUPEN	ADV-2008-0924
SECTRACK	1018078
SECUNIA	25292
SECUNIA	25329
SECUNIA	25268
SECUNIA	25273
SECUNIA	25353
SECUNIA	25461
SECUNIA	25554
SECUNIA	25571
SECUNIA	25742
SECUNIA	25867
SECUNIA	27056
SECUNIA	25787
SECUNIA	29420
SECUNIA	30161
SECUNIA	31168
XF	libpng-trns-chunk-dos(34340)