CVE-2007-5269

CVE-2007-5269 describes a denial-of-service vulnerability in libpng versions prior to 1.0.29 and 1.2.21. Remote attackers can crash applications using libpng by providing specially crafted PNG images containing malicious pCAL, sCAL, tEXt, iTXt, or ztXT chunks, which lead to out-of-bounds read operations. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and requires no authentication, but only results in a partial denial of service. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. The vulnerability has received minimal community discussion and media coverage, suggesting low public attention.