CVE-2007-2445
The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows...
5.0 MediumFix available
The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to cause a denial of service (application crash) via a grayscale PNG image with a bad tRNS chunk CRC value.
Exploit likelihood
5.21%Up 0.9 points since Feb 4, 2022
What each source reports
NVD Score used
The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to cause a denial of service (application crash) via a grayscale PNG image with a bad tRNS chunk CRC value.
- Record
CVE-2007-2445- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to cause a denial of service (application crash) via a grayscale PNG image with a bad tRNS chunk CRC value.
- Record
CVE-2007-2445- Updated
- 2026-11-02
EUVDEUVD-2007-2440 No score
The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to cause a denial of service (application crash) via a grayscale PNG image with a bad tRNS chunk CRC value.
- Record
EUVD-2007-2440- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v9wg-49f7-4f43 No score
The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows...
The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to cause a denial of service (application crash) via a grayscale PNG image with a bad tRNS chunk CRC value.
- Record
GHSA-v9wg-49f7-4f43- Updated
- 2026-11-02
OSV No score
The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to cause a denial of service (application crash) via a grayscale PNG image with a bad tRNS chunk CRC value.
- Record
CVE-2007-2445- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-2445 No score
The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to cause a denial of service (application crash) via a grayscale PNG image with a bad tRNS chunk CRC value.
- Record
DEBIAN-CVE-2007-2445- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libgd2Debian:12 |
before 2.0.35.dfsg-1 | 2.0.35.dfsg-1 |
libgd2Debian:13 |
before 2.0.35.dfsg-1 | 2.0.35.dfsg-1 |
libgd2Debian:14 |
before 2.0.35.dfsg-1 | 2.0.35.dfsg-1 |
libgd2Debian:4.0 From an advisory covering 5 CVEs |
before 2.0.33-5.2etch1, plus listed versions 2.0.33-5.2 |
2.0.33-5.2etch1 |
libpngRed Hat:enterprise_linux:2.1::as From an advisory covering 2 CVEs |
before 2:1.0.14-10 | 2:1.0.14-10 |
libpng-develRed Hat:enterprise_linux:2.1::as From an advisory covering 2 CVEs |
before 2:1.0.14-10 | 2:1.0.14-10 |
libpngRed Hat:enterprise_linux:2.1::aw From an advisory covering 2 CVEs |
before 2:1.0.14-10 | 2:1.0.14-10 |
libpng-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 2 CVEs |
before 2:1.0.14-10 | 2:1.0.14-10 |
libpngRed Hat:enterprise_linux:2.1::es From an advisory covering 2 CVEs |
before 2:1.0.14-10 | 2:1.0.14-10 |
libpng-develRed Hat:enterprise_linux:2.1::es From an advisory covering 2 CVEs |
before 2:1.0.14-10 | 2:1.0.14-10 |
Show 59 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libpngRed Hat:enterprise_linux:2.1::ws From an advisory covering 2 CVEs |
before 2:1.0.14-10 | 2:1.0.14-10 |
libpng-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 2 CVEs |
before 2:1.0.14-10 | 2:1.0.14-10 |
libpngRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 2:1.2.2-27 | 2:1.2.2-27 |
libpng-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 2:1.2.2-27 | 2:1.2.2-27 |
libpng-develRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 2:1.2.2-27 | 2:1.2.2-27 |
libpng10Red Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:1.0.13-17 | 0:1.0.13-17 |
libpng10-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:1.0.13-17 | 0:1.0.13-17 |
libpng10-develRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:1.0.13-17 | 0:1.0.13-17 |
libpngRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 2:1.2.2-27 | 2:1.2.2-27 |
libpng-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 2:1.2.2-27 | 2:1.2.2-27 |
libpng-develRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 2:1.2.2-27 | 2:1.2.2-27 |
libpng10Red Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:1.0.13-17 | 0:1.0.13-17 |
libpng10-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:1.0.13-17 | 0:1.0.13-17 |
libpng10-develRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:1.0.13-17 | 0:1.0.13-17 |
libpngRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 2:1.2.2-27 | 2:1.2.2-27 |
libpng-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 2:1.2.2-27 | 2:1.2.2-27 |
libpng-develRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 2:1.2.2-27 | 2:1.2.2-27 |
libpng10Red Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:1.0.13-17 | 0:1.0.13-17 |
libpng10-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:1.0.13-17 | 0:1.0.13-17 |
libpng10-develRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:1.0.13-17 | 0:1.0.13-17 |
libpngRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 2:1.2.2-27 | 2:1.2.2-27 |
libpng-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 2:1.2.2-27 | 2:1.2.2-27 |
libpng-develRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 2:1.2.2-27 | 2:1.2.2-27 |
libpng10Red Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:1.0.13-17 | 0:1.0.13-17 |
libpng10-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:1.0.13-17 | 0:1.0.13-17 |
libpng10-develRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:1.0.13-17 | 0:1.0.13-17 |
libpngRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 2:1.2.7-3.el4 | 2:1.2.7-3.el4 |
libpng-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 2:1.2.7-3.el4 | 2:1.2.7-3.el4 |
libpng-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 2:1.2.7-3.el4 | 2:1.2.7-3.el4 |
libpng10Red Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:1.0.16-3 | 0:1.0.16-3 |
libpng10-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:1.0.16-3 | 0:1.0.16-3 |
libpng10-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:1.0.16-3 | 0:1.0.16-3 |
libpngRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 2:1.2.7-3.el4 | 2:1.2.7-3.el4 |
libpng-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 2:1.2.7-3.el4 | 2:1.2.7-3.el4 |
libpng-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 2:1.2.7-3.el4 | 2:1.2.7-3.el4 |
libpng10Red Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:1.0.16-3 | 0:1.0.16-3 |
libpng10-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:1.0.16-3 | 0:1.0.16-3 |
libpng10-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:1.0.16-3 | 0:1.0.16-3 |
libpngRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 2:1.2.7-3.el4 | 2:1.2.7-3.el4 |
libpng-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 2:1.2.7-3.el4 | 2:1.2.7-3.el4 |
libpng-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 2:1.2.7-3.el4 | 2:1.2.7-3.el4 |
libpng10Red Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:1.0.16-3 | 0:1.0.16-3 |
libpng10-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:1.0.16-3 | 0:1.0.16-3 |
libpng10-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:1.0.16-3 | 0:1.0.16-3 |
libpngRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 2:1.2.7-3.el4 | 2:1.2.7-3.el4 |
libpng-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 2:1.2.7-3.el4 | 2:1.2.7-3.el4 |
libpng-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 2:1.2.7-3.el4 | 2:1.2.7-3.el4 |
libpng10Red Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:1.0.16-3 | 0:1.0.16-3 |
libpng10-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:1.0.16-3 | 0:1.0.16-3 |
libpng10-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:1.0.16-3 | 0:1.0.16-3 |
libpngRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 2:1.2.10-7.0.2 | 2:1.2.10-7.0.2 |
libpng-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 2:1.2.10-7.0.2 | 2:1.2.10-7.0.2 |
libpng-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 2:1.2.10-7.0.2 | 2:1.2.10-7.0.2 |
libpngRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 2:1.2.10-7.0.2 | 2:1.2.10-7.0.2 |
libpng-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 2:1.2.10-7.0.2 | 2:1.2.10-7.0.2 |
libpng-develRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 2:1.2.10-7.0.2 | 2:1.2.10-7.0.2 |
libpngRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 2:1.2.10-7.0.2 | 2:1.2.10-7.0.2 |
libpng-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 2:1.2.10-7.0.2 | 2:1.2.10-7.0.2 |
libpng-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 2:1.2.10-7.0.2 | 2:1.2.10-7.0.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2445 is a medium vulnerability (CVSS 5.0) in Png Reference Library Libpng, published May 16, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.21%, the 92nd percentile. Fixed in libgd2 2.0.35.dfsg-1.
References
openpkg.com/go/OpenPKG-SA-2007.013
support.avaya.com/elmodocs2/security/ASA-2007-254.htm
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.492650
secunia.com/advisories/25571
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10094
kb.cert.org/vuls/id/684664
Show 58 moreShow less
debian.org/security/2008/dsa-1613
sunsolve.sun.com/search/document.do?assetkey=1-26-102987-1
osvdb.org/36196
gentoo.org/security/en/glsa/glsa-200705-24.xml
coresecurity.com?action=item&id=2148
mirrorservice.org/sites/download.sourceforge.net/pub/sourceforge/l/li/libpng/libpng-1.2.17-ADVISORY.txt
securityfocus.com/bid/24023
exchange.xforce.ibmcloud.com/vulnerabilities/34340
vupen.com/english/advisories/2008/0924/references
irrlicht.sourceforge.net/changes.txt
sourceforge.net/project/shownotes.php?release_id=508653&group_id=5624
issues.rpath.com/browse/RPL-1381
lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html
securitytracker.com/id?1018078
trustix.org/errata/2007/0019
novell.com/linux/security/advisories/2007_13_sr.html
ubuntu.com/usn/usn-472-1
redhat.com/support/errata/RHSA-2007-0356.html
docs.info.apple.com/article.html?artnum=307562
mandriva.com/security/advisories?name=MDKSA-2007:116
nvd.nist.gov/vuln/detail/CVE-2007-2445
github.com/advisories/GHSA-v9wg-49f7-4f43
security-tracker.debian.org/tracker/CVE-2007-2445
access.redhat.com/errata/RHSA-2007:0356
bugzilla.redhat.com/show_bug.cgi?id=215405
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0356.json
cve.org/CVERecord?id=CVE-2006-5793