CVE-2007-5133

Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file with a large tEXt chunk that possibly triggers an integer overflow in PNG chunk size handling, as demonstrated by badlycrafted.png.

Link	Resource
http://www.securityfocus.com/bid/25816	Exploit
http://osvdb.org/45521
http://www.securityfocus.com/archive/1/480864/100/0/threaded
http://www.securityfocus.com/archive/1/480854/100/0/threaded
http://www.securityfocus.com/archive/1/480827/100/0/threaded
http://www.securityfocus.com/archive/1/480706/100/0/threaded
http://www.securityfocus.com/archive/1/480594/100/0/threaded

Configuration 1

cpe:2.3:o:microsoft:windows_2003_server:*:gold:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:*:std:*:*:*:*:* cpe:2.3:o:microsoft:windows_vista:*:*:starter:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:gold:tablet_pc:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:*:tablet_pc:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:r2:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:* cpe:2.3:o:microsoft:windows_vista:*:*:x64-business:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_vista:*:*:ultimate:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:gold:std:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:*:xp-64bit:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp1:wed:*:*:*:*:* cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:gold:x64-std:*:*:*:*:* cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:r2:x64:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp1:std:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp1:64bit:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp1:ibm_oem:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:gold:media_center:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:* cpe:2.3:o:microsoft:windows_vista:*:*:x64-home_basic:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:gold:pro:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:*:itanium:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:*:wed:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:r2:x64-std:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp2:std:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:gold:wed:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:gold:embedded:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:gold:itanium:*:*:*:*:* cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:*:ibm_oem:*:*:*:*:* cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_vista:*:*:business:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp2:pro:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp2:embedded:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:r2:wed:*:*:*:*:* cpe:2.3:o:microsoft:windows_vista:*:gold:x64:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:*:x64-std:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_vista:*:*:home_basic:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp1:pro:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:*:pro:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:gold:x64:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:*:64bit:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp2:wed:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_vista:*:*:enterprise:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:r2:std:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_vista:*:*:home_premium:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2003:*:-:*:*:*:*:*:* cpe:2.3:a:3ware:3dm_disk_management_software:*:sp2:*:*:*:*:*:* cpe:2.3:a:3ware:3dm_disk_management_software:*:sp1:*:*:*:*:*:*

---

Published : 2007-09-27 07:17

Updated : 2021-07-07 04:10

---

NVD link : CVE-2007-5133

Mitre link : CVE-2007-5133

No products.

CWE-189

CWE-399