VULNERABILITY INTELLIGENCE
CVE-2008-3964
CVSS score4.3 MEDIUM
EPSS probability3.34%
CISA KEVNot currently listed
Published2008-09-11
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:P
Description
Multiple off-by-one errors in libpng before 1.2.32beta01, and 1.4 before 1.4.0beta34, allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a PNG image with crafted zTXt chunks, related to (1) the png_push_read_zTXt function in pngread.c, and possibly related to (2) pngtest.c.
Weakness classification
- CWE-193: Off-by-one Error
Primary references
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Product, Third Party Advisory
- cve@mitre.org — Broken Link, Patch
- cve@mitre.org — Exploit, Third Party Advisory
- cve@mitre.org — Broken Link
- cve@mitre.org — Broken Link
- cve@mitre.org — Third Party Advisory