Buffer overflow in Kde

CVE-2008-1670

Heap-based buffer overflow in the progressive PNG Image loader (decoders/pngloader.cpp) in KHTML in KDE 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted image.

Vulnerability class: Buffer Overflow

EPSS: 0.048 (91.0th percentile) — read the EPSS interpretation.

Affected products

Kde — versions 4.0.0, 4.0.1, 4.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

secalert@redhat.com (vdb-entry, x_refsource_VUPEN)
secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
secalert@redhat.com (Patch, vdb-entry, x_refsource_BID)
secalert@redhat.com (vdb-entry, x_refsource_XF)
secalert@redhat.com (vdb-entry, x_refsource_SECTRACK)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)