Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2008-3964

Published: 11/09/2008 Updated: 31/01/2022
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Subscribe to Libpng

Vulnerability Summary

Multiple off-by-one errors in libpng prior to 1.2.32beta01, and 1.4 prior to 1.4.0beta34, allow context-dependent malicious users to cause a denial of service (crash) or have unspecified other impact via a PNG image with crafted zTXt chunks, related to (1) the png_push_read_zTXt function in pngread.c, and possibly related to (2) pngtest.c.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libpng libpng

libpng libpng 1.4.0

Vendor Advisories

Debian CVElist Bug Report Logs: CVE-2008-3964: off-by-one error in pngtest.c
Debian Bug report logs - #501109 CVE-2008-3964: off-by-one error in pngtestc Package: libpng; Maintainer for libpng is Anibal Monsalve Salazar <anibal@debianorg>; Reported by: Steffen Joeris <steffenjoeris@skolelinuxde> Date: Sat, 4 Oct 2008 08:09:01 UTC Severity: important Tags: patch, security Fixed in versio ...
Ubuntu Security Notice: libpng vulnerabilities
It was discovered that libpng did not properly perform bounds checking in certain operations An attacker could send a specially crafted PNG image and cause a denial of service in applications linked against libpng This issue only affected Ubuntu 804 LTS (CVE-2007-5268, CVE-2007-5269) ...

References

CWE-193http://www.openwall.com/lists/oss-security/2008/09/09/3http://sourceforge.net/tracker/index.php?func=detail&aid=2095669&group_id=5624&atid=105624http://sourceforge.net/project/shownotes.php?release_id=624518http://www.openwall.com/lists/oss-security/2008/09/09/8http://sourceforge.net/project/shownotes.php?group_id=5624&release_id=624517http://sourceforge.net/mailarchive/forum.php?thread_name=e56ccc8f0809180317u6a5306fg14683947affb3e1b%40mail.gmail.com&forum_name=png-mng-implementhttp://www.securityfocus.com/bid/31049http://www.kb.cert.org/vuls/id/889484http://secunia.com/advisories/33137http://security.gentoo.org/glsa/glsa-200812-15.xmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2009:051http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1http://www.vupen.com/english/advisories/2009/1462http://secunia.com/advisories/35302http://secunia.com/advisories/35386http://support.avaya.com/elmodocs2/security/ASA-2009-208.htmhttp://www.vupen.com/english/advisories/2009/1560http://secunia.com/advisories/31781http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1http://www.vupen.com/english/advisories/2008/2512https://exchange.xforce.ibmcloud.com/vulnerabilities/44928https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501109https://usn.ubuntu.com/730-1/https://nvd.nist.govhttps://www.kb.cert.org/vuls/id/889484
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook