CVE-2008-1670 Heap-based buffer overflow in the progressive PNG Image loader (decoders/pngloader.cpp) in KHTML in KDE 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly exec...
HighCVSS 9.3
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the progressive PNG Image loader (decoders/pngloader.cpp) in KHTML in KDE 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kde | = 4.0.0 | No fix listed |
| kde | = 4.0.1 | No fix listed |
| kde | = 4.0.2 | No fix listed |
| kde | = 4.0.3 | No fix listed |
References
- SUSE-SR:2008:011 vendor-advisory
- 29980 patch third-party-advisory vendor-advisory
- www.kde.org
- 28937 patch vdb-entry
- 1019929 vdb-entry
- ADV-2008-1371 vdb-entry
- kde-khtml-png-bo(42038) vdb-entry