[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#478283: kde4libs: CVE-2008-1670 heap based buffer overflow via specially encoded image

Package: kde4libs
Severity: grave
Tags: security patch

the following CVE (Common Vulnerabilities & Exposures) id was
published for kde4libs.

| The new progressive PNG Image loader in KHTML of KDE 4.0 and newer
| can be tricked into overrunning a heap allocated memory buffer
| by loading a specially encoded image.

Note, the mitre description is still on status RESERVED, use the upstream advisory as reference for now:


If you fix the vulnerability please also make sure to include the
CVE id in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1670

Nico Golde - http://www.ngolde.de - nion@jabber.ccc.de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.

Attachment: pgp34w7TDX7Mx.pgp
Description: PGP signature

Reply to: