CVE Daily

CVE-2007-5503

Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers t...

Medium CVSS 6.8

Overview

Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not properly handled by the read_png function.

CWE: CWE-189 Published: 2007-11-30T01:46:00.000
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.8 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags