CVE Feed

Dashboard / CVE / CVE-2007-5503

CVE-2007-5503

Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not properly handled by the read_png function.

Published:Nov 29, 2007

Last Modified:Apr 23, 2026

EPS:Nov 30, 2007

EPSS Score:0.10388

CVSS Score:6.8

Affected Products

Vendor

Product

Action

Vendor

Redhat

Product

Cairo

Redhat

Cairo

Vendor

Redhat

Product

Enterprise Linux

Redhat

Enterprise Linux

Exploits

No exploit reference

Common Weakness Enumeration

CWE-190 Integer Overflow or Wraparound

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-92 Forced Integer Overflow

References

http://bugs.gentoo.org/show_bug.cgi?id=200350

http://bugs.gentoo.org/show_bug.cgi?id=201860

http://gitweb.freedesktop.org/?p=cairo%3Ba=commitdiff%3Bh=5c7d2d14d78e4dfb1ef6d2c40f0910f177e07360

http://gitweb.freedesktop.org/?p=cairo%3Ba=commitdiff%3Bh=e49bcde27f88e21d5b8037a0089a226096f6514b

http://gitweb.freedesktop.org/?p=cairo%3Ba=commitdiff_plain%3Bh=6020f67f1a49cfe3844c4938d4af24c63c8424cc%3Bhp=c79fc9af334fd6f2d1078071d64178125561b187

http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html

http://rhn.redhat.com/errata/RHSA-2007-1078.html

http://secunia.com/advisories/27775

http://secunia.com/advisories/27819

http://secunia.com/advisories/27880

http://secunia.com/advisories/27887

http://secunia.com/advisories/27985

http://secunia.com/advisories/28289

http://secunia.com/advisories/28476

http://secunia.com/advisories/28529

http://secunia.com/advisories/28555

http://secunia.com/advisories/28838

http://secunia.com/advisories/29767

http://secunia.com/advisories/31707

http://secunia.com/advisories/31711

http://security.gentoo.org/glsa/glsa-200712-04.xml

http://security.gentoo.org/glsa/glsa-201209-25.xml

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.362119

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0015

http://www.debian.org/security/2008/dsa-1542

http://www.gentoo.org/security/en/glsa/glsa-200712-24.xml

http://www.mandriva.com/security/advisories?name=MDVSA-2008:019

http://www.securityfocus.com/archive/1/486405/100/0/threaded

http://www.securityfocus.com/archive/1/495869/100/0/threaded

http://www.securityfocus.com/bid/26650

http://www.securitytracker.com/id?1019027

http://www.vmware.com/security/advisories/VMSA-2008-0014.html

http://www.vmware.com/support/player2/doc/releasenotes_player2.html

http://www.vmware.com/support/server/doc/releasenotes_server.html

http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

http://www.vupen.com/english/advisories/2007/4045

http://www.vupen.com/english/advisories/2008/2466

https://bugzilla.redhat.com/show_bug.cgi?id=387431

https://exchange.xforce.ibmcloud.com/vulnerabilities/38771

https://issues.rpath.com/browse/RPL-1966

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11251

https://usn.ubuntu.com/550-1/

https://usn.ubuntu.com/550-2/

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00630.html

http://bugs.gentoo.org/show_bug.cgi?id=200350

http://bugs.gentoo.org/show_bug.cgi?id=201860

http://gitweb.freedesktop.org/?p=cairo%3Ba=commitdiff%3Bh=5c7d2d14d78e4dfb1ef6d2c40f0910f177e07360

http://gitweb.freedesktop.org/?p=cairo%3Ba=commitdiff%3Bh=e49bcde27f88e21d5b8037a0089a226096f6514b

http://gitweb.freedesktop.org/?p=cairo%3Ba=commitdiff_plain%3Bh=6020f67f1a49cfe3844c4938d4af24c63c8424cc%3Bhp=c79fc9af334fd6f2d1078071d64178125561b187

http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html

http://rhn.redhat.com/errata/RHSA-2007-1078.html

http://secunia.com/advisories/27775

http://secunia.com/advisories/27819

http://secunia.com/advisories/27880

http://secunia.com/advisories/27887

http://secunia.com/advisories/27985

http://secunia.com/advisories/28289

http://secunia.com/advisories/28476

http://secunia.com/advisories/28529

http://secunia.com/advisories/28555

http://secunia.com/advisories/28838

http://secunia.com/advisories/29767

http://secunia.com/advisories/31707

http://secunia.com/advisories/31711

http://security.gentoo.org/glsa/glsa-200712-04.xml

http://security.gentoo.org/glsa/glsa-201209-25.xml

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.362119

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0015

http://www.debian.org/security/2008/dsa-1542

http://www.gentoo.org/security/en/glsa/glsa-200712-24.xml

http://www.mandriva.com/security/advisories?name=MDVSA-2008:019

http://www.securityfocus.com/archive/1/486405/100/0/threaded

http://www.securityfocus.com/archive/1/495869/100/0/threaded

http://www.securityfocus.com/bid/26650

http://www.securitytracker.com/id?1019027

http://www.vmware.com/security/advisories/VMSA-2008-0014.html

http://www.vmware.com/support/player2/doc/releasenotes_player2.html

http://www.vmware.com/support/server/doc/releasenotes_server.html

http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

http://www.vupen.com/english/advisories/2007/4045

http://www.vupen.com/english/advisories/2008/2466

https://bugzilla.redhat.com/show_bug.cgi?id=387431

https://exchange.xforce.ibmcloud.com/vulnerabilities/38771

https://issues.rpath.com/browse/RPL-1966

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11251

https://usn.ubuntu.com/550-1/

https://usn.ubuntu.com/550-2/

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00630.html

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High