CVE-2007-5133
Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial...
Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file with a large tEXt chunk that possibly triggers an integer overflow in PNG chunk size handling, as demonstrated by badlycrafted.png.
Exploit likelihood
What each source reports
NVD Score used
7.1
Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file with a large tEXt chunk that possibly triggers an integer overflow in PNG chunk size handling, as demonstrated by badlycrafted.png.
- Record
CVE-2007-5133- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:N/I:N/A:C - Weakness
- CWE-189, CWE-399
- Updated
- 2026-11-02
CVE List No score
Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file with a large tEXt chunk that possibly triggers an integer overflow in PNG chunk size handling, as demonstrated by badlycrafted.png.
- Record
CVE-2007-5133- Updated
- 2026-11-02
EUVDEUVD-2007-5114 No score
Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file with a large tEXt chunk that possibly triggers an integer overflow in PNG chunk size handling, as demonstrated by badlycrafted.png.
- Record
EUVD-2007-5114- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-867p-v845-fc48 No score
Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial...
Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file with a large tEXt chunk that possibly triggers an integer overflow in PNG chunk size handling, as demonstrated by badlycrafted.png.
- Record
GHSA-867p-v845-fc48- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Windows Explorer - '.png' Image Local Denial of Service | 2007-07-26 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5133 is a high vulnerability (CVSS 7.1) in 3ware 3dm Disk Management Software, published September 27, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 22.9%, the 97th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/480594/100/0/threaded
securityfocus.com/archive/1/480854/100/0/threaded
securityfocus.com/archive/1/480706/100/0/threaded
securityfocus.com/archive/1/480827/100/0/threaded
securityfocus.com/bid/25816
osvdb.org/45521
securityfocus.com/archive/1/480864/100/0/threaded
nvd.nist.gov/vuln/detail/CVE-2007-5133
github.com/advisories/GHSA-867p-v845-fc48