CVE-2007-5133

Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file with a large tEXt chunk that possibly triggers an integer overflow in PNG chunk size handling, as demonstrated by badlycrafted.png.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:microsoft:windows_2003_server:*:*:itanium:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:*:std:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:*:wed:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:*:x64-std:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:*:xp-64bit:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:gold:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:gold:itanium:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:gold:std:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:gold:wed:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:gold:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:gold:x64-std:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:r2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:r2:std:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:r2:wed:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:r2:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:r2:x64-std:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp1:std:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp1:wed:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:std:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:wed:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:*:-:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:*:*:business:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:*:*:enterprise:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:*:*:home_basic:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:*:*:home_premium:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:*:*:starter:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:*:*:ultimate:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:*:*:x64-business:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:*:*:x64-home_basic:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:*:gold:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:*:64bit:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:*:ibm_oem:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:*:pro:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:*:tablet_pc:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:gold:embedded:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:gold:media_center:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:gold:pro:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:gold:tablet_pc:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:64bit:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:ibm_oem:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:pro:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:embedded:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:pro:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:3ware:3dm_disk_management_software:*:sp1:*:*:*:*:*:*
cpe:2.3:a:3ware:3dm_disk_management_software:*:sp2:*:*:*:*:*:*

History

07 Jul 2021, 16:10

Type Values Removed Values Added
CPE cpe:2.3:o:microsoft:windows_2003_server:*:*:compute_cluster:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:gold:x64-enterprise:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:datacenter:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:gold:datacenter:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:r2:compute_cluster:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp1:enterprise:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:gold:compute_cluster:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:gold:storage:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:*:storage:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp1:storage:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:*:datacenter:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:*:enterprise:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp1:compute_cluster:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:r2:x64-enterprise:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:gold:enterprise:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp1:datacenter:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:storage:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:r2:storage:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:r2:x64-datacenter:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:gold:x64-datacenter:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:r2:datacenter:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:*:x64-datacenter:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:enterprise:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:*:x64-enterprise:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:compute_cluster:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:r2:enterprise:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:*:-:*:*:*:*:*:*

Information

Published : 2007-09-27 19:17

Updated : 2024-02-04 17:13


NVD link : CVE-2007-5133

Mitre link : CVE-2007-5133

CVE.ORG link : CVE-2007-5133


JSON object : View

Products Affected

3ware

  • 3dm_disk_management_software

microsoft

  • windows_2003_server
  • windows_xp
  • windows_vista
  • windows_server_2003
CWE
CWE-189

Numeric Errors

CWE-399

Resource Management Errors