CVE-2008-1928 Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service (crash) via an image based fill in which the number of input channels is different from the number of output c...
MediumCVSS 5.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service (crash) via an image based fill in which the number of input channels is different from the number of output channels.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| imager | = 0.42 | No fix listed |
| imager | = 0.43 | No fix listed |
| imager | = 0.43_03 | No fix listed |
| imager | = 0.44 | No fix listed |
| imager | = 0.44_01 | No fix listed |
| imager | = 0.45 | No fix listed |
| imager | = 0.45_02 | No fix listed |
| imager | = 0.46 | No fix listed |
| imager | = 0.47 | No fix listed |
| imager | = 0.48 | No fix listed |
| imager | = 0.49 | No fix listed |
| imager | = 0.49_01 | No fix listed |
| imager | = 0.50 | No fix listed |
| imager | = 0.51 | No fix listed |
| imager | = 0.51_01 | No fix listed |
| imager | = 0.51_02 | No fix listed |
| imager | = 0.51_03 | No fix listed |
| imager | = 0.52 | No fix listed |
| imager | = 0.53 | No fix listed |
| imager | = 0.55 | No fix listed |
| imager | = 0.56 | No fix listed |
| imager | = 0.57 | No fix listed |
| imager | = 0.58 | No fix listed |
| imager | = 0.59 | No fix listed |
| imager | = 0.60 | No fix listed |
Show 6 more
| Product | Affected versions | Fixed in |
|---|---|---|
| imager | = 0.61 | No fix listed |
| imager | = 0.62 | No fix listed |
| imager | = 0.63 | No fix listed |
| debian/libimager-perl(Debian:12) | < 0.64-1 | 0.64-1 |
| debian/libimager-perl(Debian:13) | < 0.64-1 | 0.64-1 |
| debian/libimager-perl(Debian:14) | < 0.64-1 | 0.64-1 |
References
- imager.perl.org
- rt.cpan.org
- 30011 third-party-advisory
- 30030 third-party-advisory
- 28980 vdb-entry
- ADV-2008-1387 vdb-entry
- imager-doubleprecisionimage-bo(41986) vdb-entry
- FEDORA-2008-3352 vendor-advisory
- Debian Security Tracker CVE-2008-1928 vendor-advisory