← Back

CVE-2008-3964

nvd nist
Published: Sep 11, 2008Modified: Apr 23, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:N/A:P
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Multiple off-by-one errors in libpng before 1.2.32beta01, and 1.4 before 1.4.0beta34, allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a PNG image with crafted zTXt chunks, related to (1) the png_push_read_zTXt function in pngread.c, and possibly related to (2) pngtest.c.

Affected (34)

Products: Libpng: Libpng
Libpng
1 product
Libpng
Configuration A
34 vulnerable
Vulnerable SoftwareAffected Versions
Libpng
Libpng
Before 1.2.32
Libpng
Version 1.4.0 beta10
Libpng
Version 1.4.0 beta11
Libpng
Version 1.4.0 beta12
Libpng
Version 1.4.0 beta13
Libpng
Version 1.4.0 beta14
Libpng
Version 1.4.0 beta15
Libpng
Version 1.4.0 beta16
Libpng
Version 1.4.0 beta17
Libpng
Version 1.4.0 beta18
Libpng
Version 1.4.0 beta19
Libpng
Version 1.4.0 beta1
Libpng
Version 1.4.0 beta20
Libpng
Version 1.4.0 beta21
Libpng
Version 1.4.0 beta22
Libpng
Version 1.4.0 beta23
Libpng
Version 1.4.0 beta24
Libpng
Version 1.4.0 beta25
Libpng
Version 1.4.0 beta26
Libpng
Version 1.4.0 beta27
Libpng
Version 1.4.0 beta28
Libpng
Version 1.4.0 beta29
Libpng
Version 1.4.0 beta2
Libpng
Version 1.4.0 beta30
Libpng
Version 1.4.0 beta31
Libpng
Version 1.4.0 beta32
Libpng
Version 1.4.0 beta33
Libpng
Version 1.4.0 beta3
Libpng
Version 1.4.0 beta4
Libpng
Version 1.4.0 beta5
Libpng
Version 1.4.0 beta6
Libpng
Version 1.4.0 beta7
Libpng
Version 1.4.0 beta8
Libpng
Version 1.4.0 beta9

Related CWEs

CWE-193
Off-by-one Error
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

References (42)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
ProductThird Party Advisory
Source: cve@mitre.org
Broken LinkPatch
Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party AdvisoryUS Government Resource
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Permissions Required
Source: cve@mitre.org
Permissions Required
Source: cve@mitre.org
Permissions Required
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ProductThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkPatch
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions Required
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions Required
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions Required
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.