5

CVE-2008-1928

Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service (crash) via an image based fill in which the number of input channels is different from the number of output channels.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Imager ≫ Imager Version 0.42
Imager ≫ Imager Version 0.43
Imager ≫ Imager Version 0.43_03
Imager ≫ Imager Version 0.44
Imager ≫ Imager Version 0.44_01
Imager ≫ Imager Version 0.45
Imager ≫ Imager Version 0.45_02
Imager ≫ Imager Version 0.46
Imager ≫ Imager Version 0.47
Imager ≫ Imager Version 0.48
Imager ≫ Imager Version 0.49
Imager ≫ Imager Version 0.49_01
Imager ≫ Imager Version 0.50
Imager ≫ Imager Version 0.51
Imager ≫ Imager Version 0.51_01
Imager ≫ Imager Version 0.51_02
Imager ≫ Imager Version 0.51_03
Imager ≫ Imager Version 0.52
Imager ≫ Imager Version 0.53
Imager ≫ Imager Version 0.55
Imager ≫ Imager Version 0.56
Imager ≫ Imager Version 0.57
Imager ≫ Imager Version 0.58
Imager ≫ Imager Version 0.59
Imager ≫ Imager Version 0.60
Imager ≫ Imager Version 0.61
Imager ≫ Imager Version 0.62
Imager ≫ Imager Version 0.63
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.67% 0.738
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://imager.perl.org/i/release064/Imager_0_64
http://rt.cpan.org/Public/Bug/Display.html?id=35324
http://secunia.com/advisories/30011
http://secunia.com/advisories/30030
http://www.securityfocus.com/bid/28980
http://www.vupen.com/english/advisories/2008/1387/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41986
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00569.html