CVE-2007-5503
Summary
| CVE | CVE-2007-5503 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2007-11-30 01:46:00 UTC |
| Updated | 2023-02-13 02:18:00 UTC |
| Description | Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not properly handled by the read_png function. |
Risk And Classification
Problem Types: CWE-189
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | Vendor Advisory |
| Gentoo Linux Documentation -- Cairo: User-assisted execution of arbitrary code | GENTOO | security.gentoo.org | |
| cgit.freedesktop.org http git virtual host | MISC | gitweb.freedesktop.org | |
| Gentoo Bug 200350 - x11-libs/cairo <1.4.12 Buffer overflow in read_png() (CVE-2007-5503) | CONFIRM | bugs.gentoo.org | |
| freedesktop.org git - cairo/commitdiff | MISC | gitweb.freedesktop.org | |
| [SECURITY] Fedora 7 Update: cairo-1.4.14-1.fc7 | FEDORA | www.redhat.com | |
| Ubuntu update for cairo - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| VMware Workstation 6 Release Notes | CONFIRM | www.vmware.com | |
| Debian update for libcairo - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| access.redhat.com | CVE-2007-5503 | MISC | access.redhat.com | |
| VMware Player Release Notes | CONFIRM | www.vmware.com | |
| freedesktop.org git - cairo/commitdiff | CONFIRM | gitweb.freedesktop.org | Exploit |
| Cairo PNG Image Processing Remote Integer Overflow Vulnerability | BID | www.securityfocus.com | |
| Bug 387431 – CVE-2007-5503 cairo integer overflow | CONFIRM | bugzilla.redhat.com | |
| Gentoo Linux Documentation -- VMware Player, Server, Workstation: Multiple vulnerabilities | GENTOO | security.gentoo.org | |
| [security-announce] SUSE Security Summary Report SUSE-SR:2008:003 | SUSE | lists.opensuse.org | |
| RHSA-2007:1078 | REDHAT | rhn.redhat.com | Patch, Vendor Advisory |
| VMware Server Release Notes | CONFIRM | www.vmware.com | |
| Gentoo update for cairo - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| freedesktop.org git - cairo/commitdiff | CONFIRM | gitweb.freedesktop.org | |
| [Full-disclosure] VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues. | FULLDISC | lists.grok.org.uk | |
| Red Hat Customer Portal | MISC | access.redhat.com | |
| USN-550-1: Cairo vulnerability | Ubuntu security notices | UBUNTU | usn.ubuntu.com | |
| wiki.rpath.com/wiki/Advisories:rPSA-2008-0015 | CONFIRM | wiki.rpath.com | |
| Webmail - OVH | VUPEN | www.vupen.com | Vendor Advisory |
| Gentoo Bug 201860 - app-emulation/emul-linux-x86-gtklibs < 20071210 Merge newer cairo (CVE-2007-5503) | MISC | bugs.gentoo.org | |
| Fedora update for cairo - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| Gentoo update for emul-linux-x86-gtklibs - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| freedesktop.org git - cairo/commitdiff | MISC | gitweb.freedesktop.org | |
| Mandriva update for cairo - Secunia Advisories - Vulnerability Intelligence - Secunia.com | SECUNIA | secunia.com | Vendor Advisory |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Red Hat update for cairo - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| Debian -- Security Information -- DSA-1542-1 libcairo | DEBIAN | www.debian.org | |
| VMSA-2008-0014.3 - VMware | CONFIRM | www.vmware.com | |
| SUSE Update for Multiple Packages - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| USN-550-2: Cairo regression | Ubuntu security notices | UBUNTU | usn.ubuntu.com | |
| Slackware update for cairo - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| Repository / Oval Repository | OVAL | oval.cisecurity.org | |
| SecurityTracker.com Archives - Cairo Integer Overflow in Processing PNG Files Lets Remote Users Execute Arbitrary Code | SECTRACK | www.securitytracker.com | |
| VMware Fusion Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | SECUNIA | secunia.com | Vendor Advisory |
| issues.rpath.com/browse/RPL-1966 | CONFIRM | issues.rpath.com | |
| cgit.freedesktop.org http git virtual host | CONFIRM | gitweb.freedesktop.org | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| VMware Workstation Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | SECUNIA | secunia.com | Vendor Advisory |
| Cairo PNG Image Processing Integer Overflow - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| Gentoo Linux Documentation -- AMD64 x86 emulation GTK+ library: User-assisted execution of arbitrary code | GENTOO | www.gentoo.org | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| rPath update for cairo - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| Support / Security / Advisories / / MDVSA-2008:019 | Mandriva | MANDRIVA | www.mandriva.com | |
| The Slackware Linux Project: Slackware Security Advisories | SLACKWARE | slackware.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.