CVE-2008-3964 in VLC Media Player
Summary
Multiple off-by-one errors in libpng before 1.2.32beta01, and 1.4 before 1.4.0beta34, allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a PNG image with crafted zTXt chunks, related to (1) the png_push_read_zTXt function in pngread.c, and possibly related to (2) pngtest.c.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
09/09/2008
Disclosure
09/10/2008
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 3858 | VideoLAN VLC Media Player TY Processor resource management | 399 | Proof-of-Concept | Official fix | CVE-2008-3964 |