HIGH
libpng unknown chunk handling flaw
Published Apr 14, 2008
7.5
HIGHCVSS 2.0
EPSS 5.51%
Description
libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG file with zero length "unknown" chunks, which trigger an access of uninitialized memory.
Affected products
No data.
OR
- 1.0.6
- 1.0.6
- 1.0.6
- 1.0.6
- 1.0.6
- 1.0.6
- 1.0.6
- 1.0.6
- 1.0.7
- 1.0.7
- 1.0.7
- 1.0.7
- 1.0.7
- 1.0.7
- 1.0.7
- 1.0.7
- 1.0.7
- 1.0.7
- 1.0.8
- 1.0.8
- 1.0.8
- 1.0.8
- 1.0.8
- 1.0.9
- 1.0.9
- 1.0.9
- 1.0.9
- 1.0.9
- 1.0.9
- 1.0.9
- 1.0.9
- 1.0.9
- 1.0.9
- 1.0.9
- 1.0.9
- 1.0.10
- 1.0.10
- 1.0.11
- 1.0.11
- 1.0.11
- 1.0.11
- 1.0.12
- 1.0.12
- 1.0.12
- 1.0.13
- 1.0.14
- 1.0.15
- 1.0.15
- 1.0.15
- 1.0.15
- 1.0.16
- 1.0.17
- 1.0.18
- 1.0.19
- 1.0.19
- 1.0.19
- 1.0.19
- 1.0.19
- 1.0.20
- 1.0.21
- 1.0.21
- 1.0.21
- 1.0.22
- 1.0.22
- 1.0.23
- 1.0.23
- 1.0.23
- 1.0.23
- 1.0.23
- 1.0.23
- 1.0.24
- 1.0.24
- 1.0.25
- 1.0.25
- 1.0.25
- 1.0.26
- 1.0.27
- 1.0.27
- 1.0.27
- 1.0.27
- 1.0.27
- 1.0.27
- 1.0.27
- 1.0.28
- 1.0.28
- 1.0.28
- 1.0.28
- 1.0.28
- 1.0.28
- 1.0.29
- 1.0.29
- 1.0.29
- 1.0.29
- 1.0.29
- 1.0.30
- 1.0.30
- 1.0.31
- 1.0.31
- 1.0.32
- 1.2.0
- 1.2.0
- 1.2.0
- 1.2.0
- 1.2.0
- 1.2.0
- 1.2.1
- 1.2.1
- 1.2.1
- 1.2.1
- 1.2.1
- 1.2.1
- 1.2.2
- 1.2.2
- 1.2.2
- 1.2.2
- 1.2.2
- 1.2.2
- 1.2.2
- 1.2.3
- 1.2.3
- 1.2.3
- 1.2.3
- 1.2.3
- 1.2.3
- 1.2.4
- 1.2.4
- 1.2.4
- 1.2.4
- 1.2.5
- 1.2.5
- 1.2.5
- 1.2.5
- 1.2.5
- 1.2.6
- 1.2.6
- 1.2.6
- 1.2.6
- 1.2.6
- 1.2.6
- 1.2.6
- 1.2.6
- 1.2.6
- 1.2.7
- 1.2.7
- 1.2.8
- 1.2.8
- 1.2.8
- 1.2.8
- 1.2.8
- 1.2.8
- 1.2.8
- 1.2.8
- 1.2.8
- 1.2.8
- 1.2.9
- 1.2.9
- 1.2.9
- 1.2.9
- 1.2.9
- 1.2.9
- 1.2.9
- 1.2.9
- 1.2.9
- 1.2.9
- 1.2.9
- 1.2.10
- 1.2.10
- 1.2.10
- 1.2.10
- 1.2.10
- 1.2.10
- 1.2.10
- 1.2.10
- 1.2.10
- 1.2.10
- 1.2.11
- 1.2.11
- 1.2.11
- 1.2.11
- 1.2.11
- 1.2.11
- 1.2.11
- 1.2.11
- 1.2.13
- 1.2.13
- 1.2.13
- 1.2.14
- 1.2.14
- 1.2.14
- 1.2.15
- 1.2.15
- 1.2.15
- 1.2.15
- 1.2.15
- 1.2.15
- 1.2.15
- 1.2.15
- 1.2.15
- 1.2.15
- 1.2.15
- 1.2.16
- 1.2.16
- 1.2.16
- 1.2.17
- 1.2.17
- 1.2.17
- 1.2.17
- 1.2.17
- 1.2.17
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.19
- 1.2.20
- 1.2.20
- 1.2.20
- 1.2.20
- 1.2.20
- 1.2.20
- 1.2.20
- 1.2.20
- 1.2.20
- 1.2.20
- 1.2.21
- 1.2.22
- 1.2.22
- 1.2.22
- 1.2.22
- 1.2.22
- 1.2.22
- 1.2.22
- 1.2.22
- 1.2.22
- 1.2.23
- 1.2.23
- 1.2.23
- 1.2.23
- 1.2.23
- 1.2.23
- 1.2.24
- 1.2.24
- 1.2.24
- 1.2.24
- 1.2.25
- 1.2.25
- 1.2.25
- 1.2.25
- 1.2.25
- 1.2.25
- 1.2.25
- 1.2.25
- 1.2.26
- 1.2.26
- 1.2.26
- 1.2.26
- 1.2.26
- 1.2.26
- 1.2.26
- 1.4
- 1.4
- 1.4
- 1.4
- 1.4
- 1.4
- 1.4
- 1.4
- 1.4
- 1.4
- 1.4
- 1.4
- 1.4
- 1.4
- 1.4
- 1.4
- 1.4
- 1.4
- 1.4
No data.
Red Hat Enterprise Linux 2.1
libpng-2:1.0.14-12
Fixed · RHSA-2009:0333
Red Hat Enterprise Linux 4
libpng-2:1.2.7-3.el4_7.2
Fixed · RHSA-2009:0333
Red Hat Enterprise Linux 4
libpng10-0:1.0.16-3.el4_7.3
Fixed · RHSA-2009:0333
Red Hat Enterprise Linux 5
libpng-2:1.2.10-7.1.el5_3.2
Fixed · RHSA-2009:0333
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 2.1 | libpng-2:1.0.14-12 | Fixed | RHSA-2009:0333 |
| Red Hat Enterprise Linux 4 | libpng-2:1.2.7-3.el4_7.2 | Fixed | RHSA-2009:0333 |
| Red Hat Enterprise Linux 4 | libpng10-0:1.0.16-3.el4_7.3 | Fixed | RHSA-2009:0333 |
| Red Hat Enterprise Linux 5 | libpng-2:1.2.10-7.1.el5_3.2 | Fixed | RHSA-2009:0333 |
No package ranges for this CVE.
Remediation
Red Hat statement
This issue does not affect the version of libpng as shipped with Red Hat Enterprise Linux 3. Updates for affected versions of Red Hat Enterprise Linux can be found here: http://rhn.redhat.com/errata/RHSA-2009-0333.html
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
7.5 HIGH NVD
AV:N/AC:L/Au:N/C:P/I:P/A:P
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
5.51% 0.05514
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.05514
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (12 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 5.51% (0.05514) | 92.55th | v5 (v2026.06.15) |
| Jun 15, 2026 | 5.51% (0.05514) | 91.76th | v5 (v2026.06.15) |
| Mar 30, 2025 | 6.92% (0.06916) | 90.51th | v4 (v2025.03.14) |
| Mar 29, 2025 | 13.18% (0.13184) | 90.19th | v4 (v2025.03.14) |
| Mar 19, 2025 | 6.33% (0.06330) | 89.78th | v4 (v2025.03.14) |
| Mar 17, 2025 | 3.79% (0.03794) | 87.30th | v4 (v2025.03.14) |
| Dec 17, 2024 | 4.35% (0.04354) | 92.26th | v3 (v2023.03.01) |
| Dec 12, 2024 | 3.30% (0.03303) | 91.67th | v3 (v2023.03.01) |
| Mar 7, 2023 | 3.17% (0.03166) | 89.60th | v3 (v2023.03.01) |
| Mar 6, 2023 | 4.23% (0.04229) | 87.47th | v2 (v2022.01.01) |
| Apr 1, 2022 | 4.23% (0.04229) | 86.19th | v2 (v2022.01.01) |
| Feb 4, 2022 | 4.23% (0.04229) | 69.94th | v2 (v2022.01.01) |
Weaknesses (1)
References (62)
- http://libpng.sourceforge.net/Advisory-1.2.26.txt x_refsource_CONFIRM
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html vendor-advisoryx_refsource_APPLE
- http://lists.apple.com/archives/security-announce/2009/May/msg00002.html vendor-advisoryx_refsource_APPLE
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html vendor-advisoryx_refsource_SUSE
- http://secunia.com/advisories/29678 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/29792 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/29957 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/29992 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/30009 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/30157 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/30174 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/30402 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/30486 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/31882 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/33137 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/34152 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/34388 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/35074 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/35258 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/35302 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/35386 third-party-advisoryx_refsource_SECUNIA
- http://security.gentoo.org/glsa/glsa-200804-15.xml vendor-advisoryx_refsource_GENTOO
- http://security.gentoo.org/glsa/glsa-200805-10.xml vendor-advisoryx_refsource_GENTOO
- http://security.gentoo.org/glsa/glsa-200812-15.xml vendor-advisoryx_refsource_GENTOO
- http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.541247 vendor-advisoryx_refsource_SLACKWARE
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1 vendor-advisoryx_refsource_SUNALERT
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1 vendor-advisoryx_refsource_SUNALERT
- http://support.apple.com/kb/HT3549 x_refsource_CONFIRM
- http://support.avaya.com/elmodocs2/security/ASA-2009-208.htm x_refsource_CONFIRM
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0151 x_refsource_CONFIRM
- http://www.debian.org/security/2009/dsa-1750 vendor-advisoryx_refsource_DEBIAN
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:156 vendor-advisoryx_refsource_MANDRIVA
- http://www.ocert.org/advisories/ocert-2008-003.html x_refsource_MISC
- http://www.osvdb.org/44364 vdb-entryx_refsource_OSVDB
- http://www.redhat.com/support/errata/RHSA-2009-0333.html vendor-advisoryx_refsource_REDHAT
- http://www.securityfocus.com/archive/1/490823/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/archive/1/491424/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/archive/1/503912/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/bid/28770 vdb-entryx_refsource_BID
- http://www.securitytracker.com/id?1019840 vdb-entryx_refsource_SECTRACK
- http://www.us-cert.gov/cas/techalerts/TA08-260A.html third-party-advisoryx_refsource_CERTUS Government Resource
- http://www.us-cert.gov/cas/techalerts/TA09-133A.html third-party-advisoryx_refsource_CERTUS Government Resource
- http://www.vmware.com/security/advisories/VMSA-2009-0007.html x_refsource_CONFIRM
- http://www.vupen.com/english/advisories/2008/1225/references vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2008/2584 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2009/1297 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2009/1451 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2009/1462 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2009/1560 vdb-entryx_refsource_VUPEN
- https://access.redhat.com/security/cve/CVE-2008-1382 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=441839 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41800 vdb-entryx_refsource_XF
- https://nvd.nist.gov/vuln/detail/CVE-2008-1382
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10326 vdb-entrysignaturex_refsource_OVAL
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6275 vdb-entrysignaturex_refsource_OVAL
- https://www.cve.org/CVERecord?id=CVE-2008-1382
- https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00033.html vendor-advisoryx_refsource_FEDORA
- https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00080.html vendor-advisoryx_refsource_FEDORA
- https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00111.html vendor-advisoryx_refsource_FEDORA
- https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00721.html vendor-advisoryx_refsource_FEDORA
- https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00951.html vendor-advisoryx_refsource_FEDORA
- https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00960.html vendor-advisoryx_refsource_FEDORA
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Apr 14, 2008
Updated Aug 7, 2024
Reserved Mar 18, 2008
Link CVE-2008-1382
CISA Vulnrichment
Updated n/a