CVE-2008-1928
Status: ModifiedMedium (5)—
Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service (crash) via an image based fill in which the number of input channels is different from the number of output channels.
CVSS
- Version: 2.0
- Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
- Base score: 5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 1.67%
- Percentile among all scored CVEs: 76
- Score date: 10/6/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-119
References
- http://imager.perl.org/i/release064/Imager_0_64
- http://rt.cpan.org/Public/Bug/Display.html?id=35324
- http://secunia.com/advisories/30011
- http://secunia.com/advisories/30030
- http://www.securityfocus.com/bid/28980
- http://www.vupen.com/english/advisories/2008/1387/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41986
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00569.html
- http://imager.perl.org/i/release064/Imager_0_64
- http://rt.cpan.org/Public/Bug/Display.html?id=35324
- http://secunia.com/advisories/30011
- http://secunia.com/advisories/30030
- http://www.securityfocus.com/bid/28980
- http://www.vupen.com/english/advisories/2008/1387/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41986
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00569.html
Raw JSON (NVD)
Show
{
"id": "CVE-2008-1928",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2008-04-24T05:05:00.000",
"references": [
{
"url": "http://imager.perl.org/i/release064/Imager_0_64",
"source": "cve@mitre.org"
},
{
"url": "http://rt.cpan.org/Public/Bug/Display.html?id=35324",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/30011",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/30030",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/28980",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2008/1387/references",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41986",
"source": "cve@mitre.org"
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00569.html",
"source": "cve@mitre.org"
},
{
"url": "http://imager.perl.org/i/release064/Imager_0_64",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://rt.cpan.org/Public/Bug/Display.html?id=35324",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/30011",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/30030",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/28980",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2008/1387/references",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41986",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00569.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service (crash) via an image based fill in which the number of input channels is different from the number of output channels."
},
{
"lang": "es",
"value": "Desbordamiento de búfer en Imager en la versión 0.42 a la 0.63, permite a atacantes remotos provocar una denegación de servicio (caída) a través de una imagen \"based fill\" en la que el número de canales de entrada es distinto del número de canales de salida."
}
],
"lastModified": "2026-06-16T22:52:46.300",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:imager:imager:0.42:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBA093A0-6344-48FD-B76A-DB3E0337B7C1"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.43:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F5446B7-2610-4E29-AB9E-89F4C2B2409F"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.43_03:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB49EF29-6D69-402C-8032-7F780A1A4B34"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.44:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FDC38B0A-7F1A-4266-9ECA-16E24E29EABD"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.44_01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D927EC9-02AC-47B5-9617-369D3AEC98ED"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.45:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A74E4BBF-9EFA-49BE-9A97-B795BD4713E1"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.45_02:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB693EB6-BB2C-42BD-81D0-5D41A3DDA3FF"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.46:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BAD2AE19-8A39-4414-834E-B262FBBB6491"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.47:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED1E5DD6-B58B-46A6-BA49-0ED3683BE8D7"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.48:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "443B271D-CFE1-4F8A-8B5B-2BDDC19B6B14"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.49:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3AF32B50-FB3C-45A2-B757-27948CD26F13"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.49_01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF446B22-E726-45C7-8030-1CA456B5C334"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.50:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C899B130-F05D-4E48-9B15-899DB88CF4C9"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.51:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA0EBE7F-46E3-4AF1-A5DF-A1B51CDA8E51"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.51_01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "577ADA2C-39F9-4249-A6BB-4916738B536C"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.51_02:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "541DE153-A1D1-4D1A-85C6-0C1EDAF130D2"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.51_03:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32755E64-A5EE-4BEF-B897-5972A56C62C6"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.52:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17162C2C-4471-441B-9BF3-E472E1E72ED4"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.53:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF59BA5C-57E7-4756-87BE-FE3D7AB8662F"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.55:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2D652EA-BE60-43ED-8610-824D81874204"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.56:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A488357-C9FC-42F1-8E21-46C0C9BB47F8"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.57:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83426098-1258-421E-AA8A-135BBBDD9A0D"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.58:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D68C583B-F016-48CE-8939-4A6243CB9C83"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.59:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36018499-E36F-435A-82BD-15AE7A77E54F"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.60:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18E37D39-A695-4A40-A21A-42DE81A54F7E"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.61:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2F1EAC7-32C8-4930-BD0B-ABEF36133B0D"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.62:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "593C9221-813D-4952-BBFF-8B0C6F541915"
},
{
"criteria": "cpe:2.3:a:imager:imager:0.63:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F60537CB-3D82-4A9D-B9E1-8AAD80C4DE22"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}