CVE-2008-1382

Published: Apr 14, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG file with zero length "unknown" chunks, which trigger an access of uninitialized memory.

Affected (310)

Products: Libpng: Libpng

Libpng

1 product

Libpng

Configuration A

310 vulnerable

Vulnerable Software	Affected Versions
Libpng Libpng	Version 1.0.10 beta1
Libpng Libpng	Version 1.0.10 rc1
Libpng Libpng	Version 1.0.11 beta1
Libpng Libpng	Version 1.0.11 beta2
Libpng Libpng	Version 1.0.11 beta3
Libpng Libpng	Version 1.0.11 rc1
Libpng Libpng	Version 1.0.12
Libpng Libpng	Version 1.0.12 beta1
Libpng Libpng	Version 1.0.12 rc1
Libpng Libpng	Version 1.0.13
Libpng Libpng	Version 1.0.14
Libpng Libpng	Version 1.0.15
Libpng Libpng	Version 1.0.15 rc1
Libpng Libpng	Version 1.0.15 rc2
Libpng Libpng	Version 1.0.15 rc3
Libpng Libpng	Version 1.0.16
Libpng Libpng	Version 1.0.17
Libpng Libpng	Version 1.0.18
Libpng Libpng	Version 1.0.19
Libpng Libpng	Version 1.0.19 rc1
Libpng Libpng	Version 1.0.19 rc2
Libpng Libpng	Version 1.0.19 rc3
Libpng Libpng	Version 1.0.19 rc5
Libpng Libpng	Version 1.0.20
Libpng Libpng	Version 1.0.21
Libpng Libpng	Version 1.0.21 rc1
Libpng Libpng	Version 1.0.21 rc2
Libpng Libpng	Version 1.0.22
Libpng Libpng	Version 1.0.22 rc1
Libpng Libpng	Version 1.0.23
Libpng Libpng	Version 1.0.23 rc1
Libpng Libpng	Version 1.0.23 rc2
Libpng Libpng	Version 1.0.23 rc3
Libpng Libpng	Version 1.0.23 rc4
Libpng Libpng	Version 1.0.23 rc5
Libpng Libpng	Version 1.0.24
Libpng Libpng	Version 1.0.24 rc1
Libpng Libpng	Version 1.0.25
Libpng Libpng	Version 1.0.25 rc1
Libpng Libpng	Version 1.0.25 rc2
Libpng Libpng	Version 1.0.26
Libpng Libpng	Version 1.0.27
Libpng Libpng	Version 1.0.27 rc1
Libpng Libpng	Version 1.0.27 rc2
Libpng Libpng	Version 1.0.27 rc3
Libpng Libpng	Version 1.0.27 rc4
Libpng Libpng	Version 1.0.27 rc5
Libpng Libpng	Version 1.0.27 rc6
Libpng Libpng	Version 1.0.28
Libpng Libpng	Version 1.0.28 rc2
Libpng Libpng	Version 1.0.28 rc3
Libpng Libpng	Version 1.0.28 rc4
Libpng Libpng	Version 1.0.28 rc5
Libpng Libpng	Version 1.0.28 rc6
Libpng Libpng	Version 1.0.29
Libpng Libpng	Version 1.0.29 beta1
Libpng Libpng	Version 1.0.29 rc1
Libpng Libpng	Version 1.0.29 rc2
Libpng Libpng	Version 1.0.29 rc3
Libpng Libpng	Version 1.0.30
Libpng Libpng	Version 1.0.30 rc1
Libpng Libpng	Version 1.0.31
Libpng Libpng	Version 1.0.31 rc01
Libpng Libpng	Version 1.0.32
Libpng Libpng	Version 1.0.6 a
Libpng Libpng	Version 1.0.6 d
Libpng Libpng	Version 1.0.6 e
Libpng Libpng	Version 1.0.6 f
Libpng Libpng	Version 1.0.6 g
Libpng Libpng	Version 1.0.6 h
Libpng Libpng	Version 1.0.6 i
Libpng Libpng	Version 1.0.6 j
Libpng Libpng	Version 1.0.7 beta11
Libpng Libpng	Version 1.0.7 beta12
Libpng Libpng	Version 1.0.7 beta13
Libpng Libpng	Version 1.0.7 beta14
Libpng Libpng	Version 1.0.7 beta15
Libpng Libpng	Version 1.0.7 beta16
Libpng Libpng	Version 1.0.7 beta17
Libpng Libpng	Version 1.0.7 beta18
Libpng Libpng	Version 1.0.7 rc1
Libpng Libpng	Version 1.0.7 rc2
Libpng Libpng	Version 1.0.8 beta1
Libpng Libpng	Version 1.0.8 beta2
Libpng Libpng	Version 1.0.8 beta3
Libpng Libpng	Version 1.0.8 beta4
Libpng Libpng	Version 1.0.8 rc1
Libpng Libpng	Version 1.0.9 beta10
Libpng Libpng	Version 1.0.9 beta1
Libpng Libpng	Version 1.0.9 beta2
Libpng Libpng	Version 1.0.9 beta3
Libpng Libpng	Version 1.0.9 beta4
Libpng Libpng	Version 1.0.9 beta5
Libpng Libpng	Version 1.0.9 beta6
Libpng Libpng	Version 1.0.9 beta7
Libpng Libpng	Version 1.0.9 beta8
Libpng Libpng	Version 1.0.9 beta9
Libpng Libpng	Version 1.0.9 rc1
Libpng Libpng	Version 1.0.9 rc2
Libpng Libpng	Version 1.2.0 beta1
Libpng Libpng	Version 1.2.0 beta2
Libpng Libpng	Version 1.2.0 beta3
Libpng Libpng	Version 1.2.0 beta4
Libpng Libpng	Version 1.2.0 beta5
Libpng Libpng	Version 1.2.0 rc1
Libpng Libpng	Version 1.2.10 beta1
Libpng Libpng	Version 1.2.10 beta2
Libpng Libpng	Version 1.2.10 beta3
Libpng Libpng	Version 1.2.10 beta4
Libpng Libpng	Version 1.2.10 beta5
Libpng Libpng	Version 1.2.10 beta6
Libpng Libpng	Version 1.2.10 beta7
Libpng Libpng	Version 1.2.10 rc1
Libpng Libpng	Version 1.2.10 rc2
Libpng Libpng	Version 1.2.10 rc3
Libpng Libpng	Version 1.2.11 beta1
Libpng Libpng	Version 1.2.11 beta2
Libpng Libpng	Version 1.2.11 beta3
Libpng Libpng	Version 1.2.11 beta4
Libpng Libpng	Version 1.2.11 rc1
Libpng Libpng	Version 1.2.11 rc2
Libpng Libpng	Version 1.2.11 rc3
Libpng Libpng	Version 1.2.11 rc5
Libpng Libpng	Version 1.2.13 beta1
Libpng Libpng	Version 1.2.13 rc1
Libpng Libpng	Version 1.2.13 rc2
Libpng Libpng	Version 1.2.14 beta1
Libpng Libpng	Version 1.2.14 beta2
Libpng Libpng	Version 1.2.14 rc1
Libpng Libpng	Version 1.2.15 beta1
Libpng Libpng	Version 1.2.15 beta2
Libpng Libpng	Version 1.2.15 beta3
Libpng Libpng	Version 1.2.15 beta4
Libpng Libpng	Version 1.2.15 beta5
Libpng Libpng	Version 1.2.15 beta6
Libpng Libpng	Version 1.2.15 rc1
Libpng Libpng	Version 1.2.15 rc2
Libpng Libpng	Version 1.2.15 rc3
Libpng Libpng	Version 1.2.15 rc4
Libpng Libpng	Version 1.2.15 rc5
Libpng Libpng	Version 1.2.16 beta1
Libpng Libpng	Version 1.2.16 beta2
Libpng Libpng	Version 1.2.16 rc1
Libpng Libpng	Version 1.2.17 beta1
Libpng Libpng	Version 1.2.17 beta2
Libpng Libpng	Version 1.2.17 rc1
Libpng Libpng	Version 1.2.17 rc2
Libpng Libpng	Version 1.2.17 rc3
Libpng Libpng	Version 1.2.17 rc4
Libpng Libpng	Version 1.2.19 beta10
Libpng Libpng	Version 1.2.19 beta11
Libpng Libpng	Version 1.2.19 beta12
Libpng Libpng	Version 1.2.19 beta13
Libpng Libpng	Version 1.2.19 beta14
Libpng Libpng	Version 1.2.19 beta15
Libpng Libpng	Version 1.2.19 beta16
Libpng Libpng	Version 1.2.19 beta17
Libpng Libpng	Version 1.2.19 beta18
Libpng Libpng	Version 1.2.19 beta19
Libpng Libpng	Version 1.2.19 beta1
Libpng Libpng	Version 1.2.19 beta20
Libpng Libpng	Version 1.2.19 beta21
Libpng Libpng	Version 1.2.19 beta22
Libpng Libpng	Version 1.2.19 beta23
Libpng Libpng	Version 1.2.19 beta24
Libpng Libpng	Version 1.2.19 beta25
Libpng Libpng	Version 1.2.19 beta26
Libpng Libpng	Version 1.2.19 beta27
Libpng Libpng	Version 1.2.19 beta28
Libpng Libpng	Version 1.2.19 beta29
Libpng Libpng	Version 1.2.19 beta2
Libpng Libpng	Version 1.2.19 beta30
Libpng Libpng	Version 1.2.19 beta31
Libpng Libpng	Version 1.2.19 beta3
Libpng Libpng	Version 1.2.19 beta4
Libpng Libpng	Version 1.2.19 beta5
Libpng Libpng	Version 1.2.19 beta6
Libpng Libpng	Version 1.2.19 beta7
Libpng Libpng	Version 1.2.19 beta8
Libpng Libpng	Version 1.2.19 beta9
Libpng Libpng	Version 1.2.19 rc1
Libpng Libpng	Version 1.2.19 rc2
Libpng Libpng	Version 1.2.19 rc3
Libpng Libpng	Version 1.2.19 rc4
Libpng Libpng	Version 1.2.19 rc5
Libpng Libpng	Version 1.2.19 rc6
Libpng Libpng	Version 1.2.1 beta1
Libpng Libpng	Version 1.2.1 beta2
Libpng Libpng	Version 1.2.1 beta3
Libpng Libpng	Version 1.2.1 beta4
Libpng Libpng	Version 1.2.1 rc1
Libpng Libpng	Version 1.2.1 rc2
Libpng Libpng	Version 1.2.20 beta01
Libpng Libpng	Version 1.2.20 beta02
Libpng Libpng	Version 1.2.20 beta03
Libpng Libpng	Version 1.2.20 beta04
Libpng Libpng	Version 1.2.20 rc1
Libpng Libpng	Version 1.2.20 rc2
Libpng Libpng	Version 1.2.20 rc3
Libpng Libpng	Version 1.2.20 rc4
Libpng Libpng	Version 1.2.20 rc5
Libpng Libpng	Version 1.2.20 rc6
Libpng Libpng	Version 1.2.21 rc3
Libpng Libpng	Version 1.2.22 beta1
Libpng Libpng	Version 1.2.22 beta2-1.2.21
Libpng Libpng	Version 1.2.22 beta2
Libpng Libpng	Version 1.2.22 beta3-1.2.21
Libpng Libpng	Version 1.2.22 beta3
Libpng Libpng	Version 1.2.22 beta4-1.2.21
Libpng Libpng	Version 1.2.22 beta4
Libpng Libpng	Version 1.2.22 rc1-1.2.21
Libpng Libpng	Version 1.2.22 rc1
Libpng Libpng	Version 1.2.23 beta01
Libpng Libpng	Version 1.2.23 beta02
Libpng Libpng	Version 1.2.23 beta03
Libpng Libpng	Version 1.2.23 beta04
Libpng Libpng	Version 1.2.23 beta05
Libpng Libpng	Version 1.2.23 rc01
Libpng Libpng	Version 1.2.24 beta01
Libpng Libpng	Version 1.2.24 beta02
Libpng Libpng	Version 1.2.24 beta03
Libpng Libpng	Version 1.2.24 rc01
Libpng Libpng	Version 1.2.25 beta01
Libpng Libpng	Version 1.2.25 beta02
Libpng Libpng	Version 1.2.25 beta03
Libpng Libpng	Version 1.2.25 beta04
Libpng Libpng	Version 1.2.25 beta05
Libpng Libpng	Version 1.2.25 beta06
Libpng Libpng	Version 1.2.25 rc01
Libpng Libpng	Version 1.2.25 rc02
Libpng Libpng	Version 1.2.26 beta01
Libpng Libpng	Version 1.2.26 beta02
Libpng Libpng	Version 1.2.26 beta03
Libpng Libpng	Version 1.2.26 beta04
Libpng Libpng	Version 1.2.26 beta05
Libpng Libpng	Version 1.2.26 beta06
Libpng Libpng	Version 1.2.26 rc01
Libpng Libpng	Version 1.2.2 beta1
Libpng Libpng	Version 1.2.2 beta2
Libpng Libpng	Version 1.2.2 beta3
Libpng Libpng	Version 1.2.2 beta4
Libpng Libpng	Version 1.2.2 beta5
Libpng Libpng	Version 1.2.2 beta6
Libpng Libpng	Version 1.2.2 rc1
Libpng Libpng	Version 1.2.3 rc1
Libpng Libpng	Version 1.2.3 rc2
Libpng Libpng	Version 1.2.3 rc3
Libpng Libpng	Version 1.2.3 rc4
Libpng Libpng	Version 1.2.3 rc5
Libpng Libpng	Version 1.2.3 rc6
Libpng Libpng	Version 1.2.4 beta1
Libpng Libpng	Version 1.2.4 beta2
Libpng Libpng	Version 1.2.4 beta3
Libpng Libpng	Version 1.2.4 rc1
Libpng Libpng	Version 1.2.5 beta1
Libpng Libpng	Version 1.2.5 beta2
Libpng Libpng	Version 1.2.5 rc1
Libpng Libpng	Version 1.2.5 rc2
Libpng Libpng	Version 1.2.5 rc3
Libpng Libpng	Version 1.2.6 beta1
Libpng Libpng	Version 1.2.6 beta2
Libpng Libpng	Version 1.2.6 beta3
Libpng Libpng	Version 1.2.6 beta4
Libpng Libpng	Version 1.2.6 rc1
Libpng Libpng	Version 1.2.6 rc2
Libpng Libpng	Version 1.2.6 rc3
Libpng Libpng	Version 1.2.6 rc4
Libpng Libpng	Version 1.2.6 rc5
Libpng Libpng	Version 1.2.7 beta1
Libpng Libpng	Version 1.2.7 beta2
Libpng Libpng	Version 1.2.8 beta1
Libpng Libpng	Version 1.2.8 beta2
Libpng Libpng	Version 1.2.8 beta3
Libpng Libpng	Version 1.2.8 beta4
Libpng Libpng	Version 1.2.8 beta5
Libpng Libpng	Version 1.2.8 rc1
Libpng Libpng	Version 1.2.8 rc2
Libpng Libpng	Version 1.2.8 rc3
Libpng Libpng	Version 1.2.8 rc4
Libpng Libpng	Version 1.2.8 rc5
Libpng Libpng	Version 1.2.9 beta10
Libpng Libpng	Version 1.2.9 beta1
Libpng Libpng	Version 1.2.9 beta2
Libpng Libpng	Version 1.2.9 beta3
Libpng Libpng	Version 1.2.9 beta4
Libpng Libpng	Version 1.2.9 beta5
Libpng Libpng	Version 1.2.9 beta6
Libpng Libpng	Version 1.2.9 beta7
Libpng Libpng	Version 1.2.9 beta8
Libpng Libpng	Version 1.2.9 beta9
Libpng Libpng	Version 1.2.9 rc1
Libpng Libpng	Version 1.4 beta10
Libpng Libpng	Version 1.4 beta11
Libpng Libpng	Version 1.4 beta12
Libpng Libpng	Version 1.4 beta13
Libpng Libpng	Version 1.4 beta14
Libpng Libpng	Version 1.4 beta15
Libpng Libpng	Version 1.4 beta16
Libpng Libpng	Version 1.4 beta17
Libpng Libpng	Version 1.4 beta18
Libpng Libpng	Version 1.4 beta19
Libpng Libpng	Version 1.4 beta1
Libpng Libpng	Version 1.4 beta2
Libpng Libpng	Version 1.4 beta3
Libpng Libpng	Version 1.4 beta4
Libpng Libpng	Version 1.4 beta5
Libpng Libpng	Version 1.4 beta6
Libpng Libpng	Version 1.4 beta7
Libpng Libpng	Version 1.4 beta8
Libpng Libpng	Version 1.4 beta9

Related CWEs

CWE-189

References (116)

http://libpng.sourceforge.net/Advisory-1.2.26.txt

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html

Source: secalert@redhat.com

http://secunia.com/advisories/29678

Source: secalert@redhat.com

http://secunia.com/advisories/29792

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29957

Source: secalert@redhat.com

http://secunia.com/advisories/29992

Source: secalert@redhat.com

http://secunia.com/advisories/30009

Source: secalert@redhat.com

http://secunia.com/advisories/30157

Source: secalert@redhat.com

http://secunia.com/advisories/30174

Source: secalert@redhat.com

http://secunia.com/advisories/30402

Source: secalert@redhat.com

http://secunia.com/advisories/30486

Source: secalert@redhat.com

http://secunia.com/advisories/31882

Source: secalert@redhat.com

http://secunia.com/advisories/33137

Source: secalert@redhat.com

http://secunia.com/advisories/34152

Source: secalert@redhat.com

http://secunia.com/advisories/34388

Source: secalert@redhat.com

http://secunia.com/advisories/35074

Source: secalert@redhat.com

http://secunia.com/advisories/35258

Source: secalert@redhat.com

http://secunia.com/advisories/35302

Source: secalert@redhat.com

http://secunia.com/advisories/35386

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200804-15.xml

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200805-10.xml

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200812-15.xml

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.541247

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1

Source: secalert@redhat.com

http://support.apple.com/kb/HT3549

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm

Source: secalert@redhat.com

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0151

Source: secalert@redhat.com

http://www.debian.org/security/2009/dsa-1750

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:156

Source: secalert@redhat.com

http://www.ocert.org/advisories/ocert-2008-003.html

Source: secalert@redhat.com

http://www.osvdb.org/44364

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2009-0333.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/490823/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/491424/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/503912/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/28770

Source: secalert@redhat.com

http://www.securitytracker.com/id?1019840

Source: secalert@redhat.com

http://www.us-cert.gov/cas/techalerts/TA08-260A.html

Source: secalert@redhat.com

US Government Resource

http://www.us-cert.gov/cas/techalerts/TA09-133A.html

Source: secalert@redhat.com

US Government Resource

http://www.vmware.com/security/advisories/VMSA-2009-0007.html

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/1225/references

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/2584

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/1297

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/1451

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/1462

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/1560

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/41800

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10326

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6275

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00033.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00080.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00111.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00721.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00951.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00960.html

Source: secalert@redhat.com

http://libpng.sourceforge.net/Advisory-1.2.26.txt