CVE-2008-5907

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0' character constant to a NULL pointer. NOTE: some sources incorrectly report this as a double free vulnerability.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://libpng.sourceforge.net/index.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.htmlThird Party Advisory
http://openwall.com/lists/oss-security/2009/01/09/1Mailing List, Third Party Advisory
http://secunia.com/advisories/34320Third Party Advisory
http://secunia.com/advisories/34388Third Party Advisory
http://security.gentoo.org/glsa/glsa-200903-28.xmlThird Party Advisory
http://sourceforge.net/mailarchive/forum.php?thread_name=4B6F0239C13D0245820603C036D180BC79FBAA%40CABOTUKEXCH01.cabot.local&forum_name=png-mng-implementThird Party Advisory
http://www.debian.org/security/2009/dsa-1750Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:051Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/48128Third Party Advisory, VDB Entry
http://libpng.sourceforge.net/index.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.htmlThird Party Advisory
http://openwall.com/lists/oss-security/2009/01/09/1Mailing List, Third Party Advisory
http://secunia.com/advisories/34320Third Party Advisory
http://secunia.com/advisories/34388Third Party Advisory
http://security.gentoo.org/glsa/glsa-200903-28.xmlThird Party Advisory
http://sourceforge.net/mailarchive/forum.php?thread_name=4B6F0239C13D0245820603C036D180BC79FBAA%40CABOTUKEXCH01.cabot.local&forum_name=png-mng-implementThird Party Advisory
http://www.debian.org/security/2009/dsa-1750Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:051Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/48128Third Party Advisory, VDB Entry

Timeline

Published: Jan 15, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008

CVE-2008-59087.2Unspecified vulnerability in the root/boot archive tool in Sun OpenSolaris has unknown impact and local attack vectors, related to a "Tempor CVE-2008-59097.2Unspecified vulnerability in conv_lpd in Sun OpenSolaris has unknown impact and local attack vectors, related to improper handling of tempor CVE-2008-59107.2Unspecified vulnerability in txzonemgr in Sun OpenSolaris has unknown impact and local attack vectors, related to a "Temporary file vulnerab CVE-2008-591110.0Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.1 allow remote attack CVE-2008-59122.1An unspecified function in the JavaScript implementation in Microsoft Internet Explorer creates and exposes a "temporary footprint" when the CVE-2008-59134.9The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey befor CVE-2008-59142.1An unspecified function in the JavaScript implementation in Apple Safari creates and exposes a "temporary footprint" when there is a current CVE-2008-59152.1An unspecified function in the JavaScript implementation in Google Chrome creates and exposes a "temporary footprint" when there is a curren CVE-2008-59164.6gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other CVE-2008-59174.3Cross-site scripting (XSS) vulnerability in the XSS filter (framework/Text_Filter/Filter/xss.php) in Horde Application Framework 3.2.2 and 3 CVE-2008-59184.3Cross-site scripting (XSS) vulnerability in the getParameterisedSelfUrl function in index.php in WebSVN 2.0 and earlier allows remote attack CVE-2008-59196.8Directory traversal vulnerability in rss.php in WebSVN 2.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to overwr