Security Advisory

CVE-2008-5907

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-01-15 17:00:00

Last updated 2024-08-07 11:13:13

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The png_check_keyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0' character constant to a NULL pointer. NOTE: some sources incorrectly report this as a double free vulnerability.

← Browse all CVEs View on cve.org ↗