NVD

Id
5638  
Name
CVE-2008-5907  
Description
The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the "" character constant to a NULL pointer. NOTE: some sources incorrectly report this as a double free vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2009-01-15  
Modified Date
2009-03-26  
Seq
2008-5907  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
34882 5638 CVE-2008-5907 http://libpng.sourceforge.net/index.html  View
34883 5638 CVE-2008-5907 SUSE-SR:2009:003  View
34884 5638 CVE-2008-5907 [oss-security] 20090109 libpng non issue  View
34885 5638 CVE-2008-5907 GLSA-200903-28  View
34886 5638 CVE-2008-5907 [png-mng-implement] 20081126 Memory overwriting bug in png_check_keyword()  View
34887 5638 CVE-2008-5907 DSA-1750  View
34888 5638 CVE-2008-5907 MDVSA-2009:051  View
34889 5638 CVE-2008-5907 libpng-pngcheckkeyword-memory-corruption(48128)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40619 JVNDB-2009-001625 libpng の pngwutil.c の png_check_keyword 関数における任意のメモリロケーションの値をゼロに設定される脆弱性 libpng の pngwutil.c の png_check_keyword 関数には、任意のメモリロケーションの値をゼロに設定される脆弱性が存在します。 CVE-2008-5907 36020 CVE-2008-5907 5638 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001625.html 2009-01-15 2009-07-08 View