Russian Vulnerability Scanner Database

Back to List

CVE-2008-5907

Scores

EPSS

0.008very_low0.8%
0%20%40%60%80%100%

Percentile: 0.8%

CVSS

5.0medium2.0
0246810

CVSS Score: 5.0/10

All CVSS Scores

CVSS 2.0
5.0

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the ‘\0’ character constant to a NULL pointer. NOTE: some sources incorrectly report this as a double free vulnerability.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

debiannvdubuntu

Related Vulnerabilities

BDU:2015-09372

Exploits

Exploit ID: 14422

Source: exploitdb

URL: https://www.exploit-db.com/exploits/14422

Exploit ID: 25094

Source: exploitdb

URL: https://www.exploit-db.com/exploits/25094

Exploit ID: 389

Source: exploitdb

URL: https://www.exploit-db.com/exploits/389

Exploit ID: 393

Source: exploitdb

URL: https://www.exploit-db.com/exploits/393

Exploit ID: CVE-2010-1205

Source: github-poc

URL: https://github.com/mk219533/CVE-2010-1205

Recommendations

Source: nvd

All libpng users should upgrade to the latest version:

# emerge –sync
# emerge –ask –oneshot –verbose “>=media-libs/libpng-1.2.35”

URL: http://security.gentoo.org/glsa/glsa-200903-28.xml

Vulnerable Software (4)

Type: Configuration

Product: libpng

Operating System: debian

Trait: 
{  "fixed": "1.2.35-1"}

Source: debian

Type: Configuration

Product: libpng

Operating System: ubuntu hardy 8.04

Trait: 
{  "fixed": "1.2.15~beta5-3ubuntu0.1"}

Source: ubuntu

Type: Configuration

Vendor: *

Product: debian_linux

Operating System: * * *

Trait: 
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",...

Source: nvd

Type: Configuration

Vendor: *

Product: libpng

Operating System: * * *

Trait: 
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*",      "versionEndExcluding": "1.0.42",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:libpng:l...

Source: nvd

End of list