CVE-2007-5503

Upstream information

CVE-2007-5503 at MITRE

Description

Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not properly handled by the read_png function.

---

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v2 Scores

	National Vulnerability Database
Base Score	6.8
Vector	AV:N/AC:M/Au:N/C:P/I:P/A:P
Access Vector	Network
Access Complexity	Medium
Authentication	None
Confidentiality Impact	Partial
Integrity Impact	Partial
Availability Impact	Partial

SUSE Bugzilla entry: 342926 [RESOLVED / FIXED]

SUSE Security Advisories:

• SUSE-SR:2008:003, published Thu, 07 Feb 2008 18:00:00 +0000

List of released packages

Product(s)	Fixed package version(s)	References
SUSE LINUX 10.1	cairo >= 1.0.2-27.19 cairo-32bit >= 1.0.2-27.19 cairo-64bit >= 1.0.2-27.19 cairo-devel >= 1.0.2-27.19 cairo-doc >= 1.0.2-27.19