CVE

Id
31499  
CVE No.
CVE-2008-1382  
Status
Candidate  
Description
libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG file with zero length "unknown" chunks, which trigger an access of uninitialized memory.  
Phase
Assigned (20080318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
337818 31499 CVE-2008-1382 BUGTRAQ:20080414 [oCERT-2008-003] libpng zero-length chunks incorrect handling  View
337819 31499 CVE-2008-1382 URL:http://www.securityfocus.com/archive/1/archive/1/490823/100/0/threaded  View
337820 31499 CVE-2008-1382 BUGTRAQ:20080429 rPSA-2008-0151-1 libpng  View
337821 31499 CVE-2008-1382 URL:http://www.securityfocus.com/archive/1/archive/1/491424/100/0/threaded  View
337822 31499 CVE-2008-1382 BUGTRAQ:20090529 VMSA-2009-0007 VMware Hosted products and ESX and ESXi patches resolve security issues  View
337823 31499 CVE-2008-1382 URL:http://www.securityfocus.com/archive/1/archive/1/503912/100/0/threaded  View
337824 31499 CVE-2008-1382 MISC:http://www.ocert.org/advisories/ocert-2008-003.html  View
337825 31499 CVE-2008-1382 CONFIRM:http://libpng.sourceforge.net/Advisory-1.2.26.txt  View
337826 31499 CVE-2008-1382 CONFIRM:http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0151  View
337827 31499 CVE-2008-1382 CONFIRM:http://support.apple.com/kb/HT3549  View
337828 31499 CVE-2008-1382 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2009-0007.html  View
337829 31499 CVE-2008-1382 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm  View
337830 31499 CVE-2008-1382 APPLE:APPLE-SA-2008-09-15  View
337831 31499 CVE-2008-1382 URL:http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html  View
337832 31499 CVE-2008-1382 APPLE:APPLE-SA-2009-05-12  View
337833 31499 CVE-2008-1382 URL:http://lists.apple.com/archives/security-announce/2009/May/msg00002.html  View
337834 31499 CVE-2008-1382 DEBIAN:DSA-1750  View
337835 31499 CVE-2008-1382 URL:http://www.debian.org/security/2009/dsa-1750  View
337836 31499 CVE-2008-1382 FEDORA:FEDORA-2008-3683  View
337837 31499 CVE-2008-1382 URL:https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00721.html  View
337838 31499 CVE-2008-1382 FEDORA:FEDORA-2008-3937  View
337839 31499 CVE-2008-1382 URL:https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00960.html  View
337840 31499 CVE-2008-1382 FEDORA:FEDORA-2008-3979  View
337841 31499 CVE-2008-1382 URL:https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00951.html  View
337842 31499 CVE-2008-1382 FEDORA:FEDORA-2008-4847  View
337843 31499 CVE-2008-1382 URL:https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00033.html  View
337844 31499 CVE-2008-1382 FEDORA:FEDORA-2008-4910  View
337845 31499 CVE-2008-1382 URL:https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00080.html  View
337846 31499 CVE-2008-1382 FEDORA:FEDORA-2008-4947  View
337847 31499 CVE-2008-1382 URL:https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00111.html  View
337848 31499 CVE-2008-1382 GENTOO:GLSA-200804-15  View
337849 31499 CVE-2008-1382 URL:http://security.gentoo.org/glsa/glsa-200804-15.xml  View
337850 31499 CVE-2008-1382 GENTOO:GLSA-200805-10  View
337851 31499 CVE-2008-1382 URL:http://security.gentoo.org/glsa/glsa-200805-10.xml  View
337852 31499 CVE-2008-1382 GENTOO:GLSA-200812-15  View
337853 31499 CVE-2008-1382 URL:http://security.gentoo.org/glsa/glsa-200812-15.xml  View
337854 31499 CVE-2008-1382 MANDRIVA:MDVSA-2008:156  View
337855 31499 CVE-2008-1382 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2008:156  View
337856 31499 CVE-2008-1382 REDHAT:RHSA-2009:0333  View
337857 31499 CVE-2008-1382 URL:http://www.redhat.com/support/errata/RHSA-2009-0333.html  View
337858 31499 CVE-2008-1382 SLACKWARE:SSA:2008-119-01  View
337859 31499 CVE-2008-1382 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.541247  View
337860 31499 CVE-2008-1382 SUNALERT:259989  View
337861 31499 CVE-2008-1382 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1  View
337862 31499 CVE-2008-1382 SUNALERT:1020521  View
337863 31499 CVE-2008-1382 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1  View
337864 31499 CVE-2008-1382 SUSE:SUSE-SR:2008:010  View
337865 31499 CVE-2008-1382 URL:http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html  View
337866 31499 CVE-2008-1382 CERT:TA08-260A  View
337867 31499 CVE-2008-1382 URL:http://www.us-cert.gov/cas/techalerts/TA08-260A.html  View
337868 31499 CVE-2008-1382 CERT:TA09-133A  View
337869 31499 CVE-2008-1382 URL:http://www.us-cert.gov/cas/techalerts/TA09-133A.html  View
337870 31499 CVE-2008-1382 BID:28770  View
337871 31499 CVE-2008-1382 URL:http://www.securityfocus.com/bid/28770  View
337872 31499 CVE-2008-1382 OVAL:oval:org.mitre.oval:def:10326  View
337873 31499 CVE-2008-1382 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10326  View
337874 31499 CVE-2008-1382 OVAL:oval:org.mitre.oval:def:6275  View
337875 31499 CVE-2008-1382 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6275  View
337876 31499 CVE-2008-1382 SECUNIA:34388  View
337877 31499 CVE-2008-1382 URL:http://secunia.com/advisories/34388  View
337878 31499 CVE-2008-1382 SECUNIA:35074  View
337879 31499 CVE-2008-1382 URL:http://secunia.com/advisories/35074  View
337880 31499 CVE-2008-1382 SECUNIA:35258  View
337881 31499 CVE-2008-1382 URL:http://secunia.com/advisories/35258  View
337882 31499 CVE-2008-1382 SECUNIA:35302  View
337883 31499 CVE-2008-1382 URL:http://secunia.com/advisories/35302  View
337884 31499 CVE-2008-1382 SECUNIA:35386  View
337885 31499 CVE-2008-1382 URL:http://secunia.com/advisories/35386  View
337886 31499 CVE-2008-1382 SECUNIA:34152  View
337887 31499 CVE-2008-1382 URL:http://secunia.com/advisories/34152  View
337888 31499 CVE-2008-1382 VUPEN:ADV-2008-1225  View
337889 31499 CVE-2008-1382 URL:http://www.vupen.com/english/advisories/2008/1225/references  View
337890 31499 CVE-2008-1382 VUPEN:ADV-2008-2584  View
337891 31499 CVE-2008-1382 URL:http://www.vupen.com/english/advisories/2008/2584  View
337892 31499 CVE-2008-1382 OSVDB:44364  View
337893 31499 CVE-2008-1382 URL:http://www.osvdb.org/44364  View
337894 31499 CVE-2008-1382 SECTRACK:1019840  View
337895 31499 CVE-2008-1382 URL:http://www.securitytracker.com/id?1019840  View
337896 31499 CVE-2008-1382 SECUNIA:29792  View
337897 31499 CVE-2008-1382 URL:http://secunia.com/advisories/29792  View
337898 31499 CVE-2008-1382 SECUNIA:29678  View
337899 31499 CVE-2008-1382 URL:http://secunia.com/advisories/29678  View
337900 31499 CVE-2008-1382 SECUNIA:29992  View
337901 31499 CVE-2008-1382 URL:http://secunia.com/advisories/29992  View
337902 31499 CVE-2008-1382 SECUNIA:29957  View
337903 31499 CVE-2008-1382 URL:http://secunia.com/advisories/29957  View
337904 31499 CVE-2008-1382 SECUNIA:30009  View
337905 31499 CVE-2008-1382 URL:http://secunia.com/advisories/30009  View
337906 31499 CVE-2008-1382 SECUNIA:30402  View
337907 31499 CVE-2008-1382 URL:http://secunia.com/advisories/30402  View
337908 31499 CVE-2008-1382 SECUNIA:30486  View
337909 31499 CVE-2008-1382 URL:http://secunia.com/advisories/30486  View
337910 31499 CVE-2008-1382 SECUNIA:31882  View
337911 31499 CVE-2008-1382 URL:http://secunia.com/advisories/31882  View
337912 31499 CVE-2008-1382 SECUNIA:30157  View
337913 31499 CVE-2008-1382 URL:http://secunia.com/advisories/30157  View
337914 31499 CVE-2008-1382 SECUNIA:30174  View
337915 31499 CVE-2008-1382 URL:http://secunia.com/advisories/30174  View
337916 31499 CVE-2008-1382 SECUNIA:33137  View
337917 31499 CVE-2008-1382 URL:http://secunia.com/advisories/33137  View
337918 31499 CVE-2008-1382 VUPEN:ADV-2009-1297  View
337919 31499 CVE-2008-1382 URL:http://www.vupen.com/english/advisories/2009/1297  View
337920 31499 CVE-2008-1382 VUPEN:ADV-2009-1451  View
337921 31499 CVE-2008-1382 URL:http://www.vupen.com/english/advisories/2009/1451  View
337922 31499 CVE-2008-1382 VUPEN:ADV-2009-1462  View
337923 31499 CVE-2008-1382 URL:http://www.vupen.com/english/advisories/2009/1462  View
337924 31499 CVE-2008-1382 VUPEN:ADV-2009-1560  View
337925 31499 CVE-2008-1382 URL:http://www.vupen.com/english/advisories/2009/1560  View
337926 31499 CVE-2008-1382 XF:libpng-zero-length-code-execution(41800)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50282 JVNDB-2008-005592 S9Y のインストーラにおけるクロスサイトスクリプティングの脆弱性 Serendipity (S9Y) のインストーラには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-1386 31499 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005592.html  View