CVE-2008-1928

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-04-24 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service (crash) via an image based fill in which the number of input channels is different from the number of output channels.

Affected products

Imager: 0.42, 0.43, 0.43_03, 0.44, 0.44_01, 0.45 (+22)

References

http://imager.perl.org/i/release064/Imager_0_64
http://rt.cpan.org/Public/Bug/Display.html?id=35324
http://secunia.com/advisories/30011
http://secunia.com/advisories/30030
http://www.securityfocus.com/bid/28980
http://www.vupen.com/english/advisories/2008/1387/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41986
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00569.html
http://imager.perl.org/i/release064/Imager_0_64
http://rt.cpan.org/Public/Bug/Display.html?id=35324
http://secunia.com/advisories/30011
http://secunia.com/advisories/30030

Get alerted when CVE-2008-1928 or the next vulnerability affects your stack