NVD

Id
3826  
Name
CVE-2008-3964  
Description
Multiple off-by-one errors in libpng before 1.2.32beta01, and 1.4 before 1.4.0beta34, allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a PNG image with crafted zTXt chunks, related to (1) the png_push_read_zTXt function in pngread.c, and possibly related to (2) pngtest.c.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-09-10  
Modified Date
2011-03-07  
Seq
2008-3964  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
24231 3826 CVE-2008-3964 GLSA-200812-15  View
24232 3826 CVE-2008-3964 [png-mng-implement] 20080918 libpng-1.0.40 and libpng-1.2.32 available  View
24233 3826 CVE-2008-3964 http://sourceforge.net/project/shownotes.php?group_id=5624&release_id=624517  View
24234 3826 CVE-2008-3964 http://sourceforge.net/project/shownotes.php?release_id=624518  View
24235 3826 CVE-2008-3964 http://sourceforge.net/tracker/index.php?func=detail&aid=2095669&group_id=5624&atid=105624  View
24236 3826 CVE-2008-3964 259989  View
24237 3826 CVE-2008-3964 1020521  View
24238 3826 CVE-2008-3964 http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm  View
24239 3826 CVE-2008-3964 VU#889484  View
24240 3826 CVE-2008-3964 MDVSA-2009:051  View
24241 3826 CVE-2008-3964 [oss-security] 20080909 CVE request (libpng)  View
24242 3826 CVE-2008-3964 [oss-security] 20080909 Re: CVE request (libpng)  View
24243 3826 CVE-2008-3964 31049  View
24244 3826 CVE-2008-3964 ADV-2008-2512  View
24245 3826 CVE-2008-3964 ADV-2009-1462  View
24246 3826 CVE-2008-3964 ADV-2009-1560  View
24247 3826 CVE-2008-3964 libpng-pngpushreadztxt-dos(44928)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47003 JVNDB-2008-002313 libpng におけるサービス運用妨害 (DoS) 状態の脆弱性 libpng には、PNG ファイルの処理に不備があることにより、サービス運用妨害 (DoS) 状態となる、またはその他の詳細不明な影響を受ける脆弱性が存在します。 CVE-2008-3964 34077 CVE-2008-3964 3826 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002313.html 2008-09-11 2012-04-18 View