CPANSA-Imager-2008-1928: Imager vulnerability
Publisher | giterlizzi | Document category | csaf_security_advisory |
---|---|---|---|
Initial release date | 2008-04-24T00:00:00 | Engine | CSAF Perl Toolkit 0.25 |
Current release date | 2008-04-24T00:00:00 | Build Date | |
Current version | 1 | Status | final |
CVSS v3.1 Base Score | Severity | ||
Original language | Language | en | |
Also referred to |
Vulnerability Description
Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service (crash) via an image based fill in which the number of input channels is different from the number of output channels.
Vulnerabilities
CVE-2008-1928
Vulnerability DescriptionBuffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service (crash) via an image based fill in which the number of input channels is different from the number of output channels.
Weakness | CWE-119 : Improper Restriction of Operations within the Bounds of a Memory Buffer |
---|
Product status
Known affected
Product | Score | ||||||||
---|---|---|---|---|---|---|---|---|---|
Imager greater than or equal 0.42 and less than or equal 0.63 |
|
Fixed
- Imager greater than or equal 0.64
giterlizzi
Namespace: https://github.com/giterlizzi/
gdt@cpan.org
References
- CPANSA-Imager-2008-1928 JSON self
https://raw.githubusercontent.com/giterlizzi/perl-CPANSA-CSAF/develop/csaf/white/2008/cpansa-imager-2008-1928.json - https://metacpan.org/dist/Imager/changes external
https://metacpan.org/dist/Imager/changes - http://rt.cpan.org/Public/Bug/Display.html?id=35324 external
http://rt.cpan.org/Public/Bug/Display.html?id=35324 - http://imager.perl.org/i/release064/Imager_0_64 external
http://imager.perl.org/i/release064/Imager_0_64 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00569.html external
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00569.html - http://www.securityfocus.com/bid/28980 external
http://www.securityfocus.com/bid/28980 - http://secunia.com/advisories/30030 external
http://secunia.com/advisories/30030 - http://secunia.com/advisories/30011 external
http://secunia.com/advisories/30011 - http://www.vupen.com/english/advisories/2008/1387/references external
http://www.vupen.com/english/advisories/2008/1387/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41986 external
https://exchange.xforce.ibmcloud.com/vulnerabilities/41986 - CVE-2008-1928 (NVD) external
https://nvd.nist.gov/vuln/detail/CVE-2008-1928
Revision history
Version | Date of the revision | Summary of the revision |
---|---|---|
1 | Thu Apr 24 00:00:00 2008 | First release |
Sharing rules
TLP:WHITE
For the TLP version see: https://www.first.org/tlp/