5

CVE-2008-1928

Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service (crash) via an image based fill in which the number of input channels is different from the number of output channels.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Imager ≫ Imager Version0.42
Imager ≫ Imager Version0.43
Imager ≫ Imager Version0.43_03
Imager ≫ Imager Version0.44
Imager ≫ Imager Version0.44_01
Imager ≫ Imager Version0.45
Imager ≫ Imager Version0.45_02
Imager ≫ Imager Version0.46
Imager ≫ Imager Version0.47
Imager ≫ Imager Version0.48
Imager ≫ Imager Version0.49
Imager ≫ Imager Version0.49_01
Imager ≫ Imager Version0.50
Imager ≫ Imager Version0.51
Imager ≫ Imager Version0.51_01
Imager ≫ Imager Version0.51_02
Imager ≫ Imager Version0.51_03
Imager ≫ Imager Version0.52
Imager ≫ Imager Version0.53
Imager ≫ Imager Version0.55
Imager ≫ Imager Version0.56
Imager ≫ Imager Version0.57
Imager ≫ Imager Version0.58
Imager ≫ Imager Version0.59
Imager ≫ Imager Version0.60
Imager ≫ Imager Version0.61
Imager ≫ Imager Version0.62
Imager ≫ Imager Version0.63
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.67% 0.738
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://imager.perl.org/i/release064/Imager_0_64
http://rt.cpan.org/Public/Bug/Display.html?id=35324
http://secunia.com/advisories/30011
http://secunia.com/advisories/30030
http://www.securityfocus.com/bid/28980
http://www.vupen.com/english/advisories/2008/1387/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41986
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00569.html