Vulnerability Details : CVE-2007-5133
Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file with a large tEXt chunk that possibly triggers an integer overflow in PNG chunk size handling, as demonstrated by badlycrafted.png.
Vulnerability category: OverflowDenial of service
Exploit prediction scoring system (EPSS) score for CVE-2007-5133
Probability of exploitation activity in the next 30 days: 19.03%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 96 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2007-5133
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|
|
7.1
|
HIGH | AV:N/AC:M/Au:N/C:N/I:N/A:C |
8.6
|
6.9
|
[email protected] |
CWE ids for CVE-2007-5133
-
Assigned by: [email protected] (Primary)
-
Assigned by: [email protected] (Primary)
References for CVE-2007-5133
-
http://www.securityfocus.com/archive/1/480864/100/0/threaded
-
http://www.securityfocus.com/archive/1/480594/100/0/threaded
-
http://www.securityfocus.com/archive/1/480827/100/0/threaded
-
http://www.securityfocus.com/archive/1/480854/100/0/threaded
-
http://www.securityfocus.com/archive/1/480706/100/0/threaded
-
http://www.securityfocus.com/bid/25816
Exploit
Products affected by CVE-2007-5133
- cpe:2.3:o:microsoft:windows_xp:*:*:64bit:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:gold:embedded:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:gold:pro:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp2:embedded:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:*:ibm_oem:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:*:tablet_pc:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp1:ibm_oem:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp1:pro:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp2:pro:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:gold:media_center:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:gold:tablet_pc:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:*:pro:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp1:64bit:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:gold:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:*:std:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:r2:wed:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:gold:wed:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:sp1:wed:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:sp2:std:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:r2:std:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:gold:std:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:gold:itanium:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:r2:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:gold:x64-std:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:*:wed:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:sp1:std:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:*:x64-std:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:*:itanium:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:*:xp-64bit:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:gold:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:r2:x64-std:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:sp2:wed:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:r2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2003:*:-:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:*:*:x64-home_basic:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:*:*:business:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:*:*:home_premium:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:*:*:starter:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:*:*:ultimate:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:*:gold:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:*:*:home_basic:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:*:*:x64-business:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:*:*:enterprise:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:*
- cpe:2.3:a:3ware:3dm_disk_management_software:*:sp1:*:*:*:*:*:*
- cpe:2.3:a:3ware:3dm_disk_management_software:*:sp2:*:*:*:*:*:*