National Cyber Awareness System

Vulnerability Summary for CVE-2008-5907

Overview

The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0' character constant to a NULL pointer. NOTE: some sources incorrectly report this as a double free vulnerability.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Vendor Statements (disclaimer)

Official Statement from Red Hat (02/11/2009)

Red Hat does not consider this bug to be a security issue. For a more detailed explanation, please see the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-5907

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: XF

Name: libpng-pngcheckkeyword-memory-corruption(48128)

Hyperlink:http://xforce.iss.net/xforce/xfdb/48128

External Source: MANDRIVA

Name: MDVSA-2009:051

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2009:051

External Source: DEBIAN

Name: DSA-1750

Hyperlink:http://www.debian.org/security/2009/dsa-1750

External Source: MLIST

Name: [png-mng-implement] 20081126 Memory overwriting bug in png_check_keyword()

Hyperlink:http://sourceforge.net/mailarchive/forum.php?thread_name=4B6F0239C13D0245820603C036D180BC79FBAA%40CABOTUKEXCH01.cabot.local&forum_name=png-mng-implement

External Source: GENTOO

Name: GLSA-200903-28

Hyperlink:http://security.gentoo.org/glsa/glsa-200903-28.xml

External Source: SECUNIA

Name: 34388

Hyperlink:http://secunia.com/advisories/34388

External Source: SECUNIA

Name: 34320

Hyperlink:http://secunia.com/advisories/34320

External Source: MLIST

Name: [oss-security] 20090109 libpng non issue

Hyperlink:http://openwall.com/lists/oss-security/2009/01/09/1

External Source: SUSE

Name: SUSE-SR:2009:003

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html

External Source: CONFIRM

Name: http://libpng.sourceforge.net/index.html

Hyperlink:http://libpng.sourceforge.net/index.html