Fluid Attacks Database

Description

The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to cause a denial of service (application crash) via a grayscale PNG image with a bad tRNS chunk CRC value.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	libgd2	>=0 <2.0.35.dfsg-1	2.0.35.dfsg-1
debian 14	libgd2	>=0 <2.0.35.dfsg-1	2.0.35.dfsg-1
debian 12	libgd2	>=0 <2.0.35.dfsg-1	2.0.35.dfsg-1
debian 13	libgd2	>=0 <2.0.35.dfsg-1	2.0.35.dfsg-1
rpm rhel5	libpng	<2:1.2.10-7.0.2	2:1.2.10-7.0.2

Aliases

1. CVE-2007-24452. NVD-2007-24453. OSV-DEBIAN-2007-24454. OSV-2007-24455. SECURITY-TRACKER-CVE-2007-2445

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.