Lucene search

K
cve[email protected]CVE-2008-1670
HistoryApr 28, 2008 - 5:05 p.m.

CVE-2008-1670

2008-04-2817:05:00
CWE-119
web.nvd.nist.gov
24
cve-2008-1670
buffer overflow
png
khtml
kde
denial of service
remote attack
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.039 Low

EPSS

Percentile

92.0%

Heap-based buffer overflow in the progressive PNG Image loader (decoders/pngloader.cpp) in KHTML in KDE 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted image.

Affected configurations

NVD
Node
kdekdeMatch4.0.0
OR
kdekdeMatch4.0.1
OR
kdekdeMatch4.0.2
OR
kdekdeMatch4.0.3

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.039 Low

EPSS

Percentile

92.0%