Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2008-0544

Quick assessment

Affected

n/a n/a

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

1.2.7版本以前的SDL_image 的IMG_LoadLBM_RW function中的堆缓冲区溢出漏洞会允许远程攻击者通过一个精心设计的IFF ILBM文件来造成服务拒绝(应用程序崩溃)或可能执行任意代码。

AI Predicted 7.5 Difficulty: Moderate EPSS 7.93% · P95 Updated Feb 21, 2026

Possible ATT&CK Techniques 2 AI

T1203 · Exploitation for Client Execution T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2008-0544

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Heap-based buffer overflow in the IMG_LoadLBM_RW function in IMG_lbm.c in SDL_image before 1.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted IFF ILBM file. NOTE: some of these details are obtained from third party information.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

SDL_image IMG_LoadLBM_RW function 远程缓冲区溢出漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2008-0544

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2008-0544

请登录查看更多情报信息。

Vendor Advisories for CVE-2008-0544 (13)

http://secunia.com/advisories/29542 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/28830 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/28640 third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/bid/27435 vdb-entry x_refsource_BID
http://secunia.com/advisories/28850 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/28869 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/28752 third-party-advisory x_refsource_SECUNIA
http://www.debian.org/security/2008/dsa-1493 vendor-advisory x_refsource_DEBIAN
http://www.ubuntu.com/usn/usn-595-1 vendor-advisory x_refsource_UBUNTU
http://www.vupen.com/english/advisories/2008/0266 vdb-entry x_refsource_VUPEN
http://www.mandriva.com/security/advisories?name=MDVSA-2008:040 vendor-advisory x_refsource_MANDRIVA
https://exchange.xforce.ibmcloud.com/vulnerabilities/39899 vdb-entry x_refsource_XF
http://www.securityfocus.com/archive/1/488079/100/0/threaded mailing-list x_refsource_BUGTRAQ

Other References for CVE-2008-0544 (8)

http://www.libsdl.org/cgi/viewvc.cgi/trunk/SDL_image/IMG_lbm.c?revision=3521&view=markup x_refsource_CONFIRM
http://wiki.rpath.com/Advisories:rPSA-2008-0061 x_refsource_CONFIRM
http://www.libsdl.org/cgi/viewvc.cgi/trunk/SDL_image/IMG_lbm.c?r1=3341&r2=3521 x_refsource_CONFIRM
https://issues.rpath.com/browse/RPL-2206 x_refsource_CONFIRM
http://bugs.gentoo.org/show_bug.cgi?id=207933 x_refsource_CONFIRM
http://www.gentoo.org/security/en/glsa/glsa-200802-01.xml vendor-advisory x_refsource_GENTOO
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00039.html vendor-advisory x_refsource_FEDORA
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00008.html vendor-advisory x_refsource_FEDORA

https://www.cve.org/CVERecord?id=CVE-2008-0544

Same Patch Batch · n/a · 2008-02-01 · 19 CVEs total

CVE-2008-0543		Pre Dynamic Institution "login.asp" 和 "siteadmin/login.asp" 多个SQL注入漏洞
CVE-2008-0552		eTicket 'index.php'跨站脚本攻击漏洞
CVE-2008-0551		Namo web Editor NamoInstaller.dll ActiveX控件任意命令执行漏洞
CVE-2008-0550		Steamcast Off-by-one 错误缓冲区溢出漏洞
CVE-2008-0549		radio_toolbox steamcast 的OggHeaderParse 函数数字错误漏洞
CVE-2008-0548		radio_toolbox steamcast Content-Length HTTP头拒绝服务攻击漏洞
CVE-2008-0547		CandyPress admin/utilities_ConfigHelp.asp 跨站脚本攻击漏洞
CVE-2008-0546		CandyPress 多个SQL注入漏洞
CVE-2008-0545		Bubbling Library 多个参数目录遍历漏洞
CVE-2007-6698		OpenLDAP NOOP control 拒绝服务漏洞
CVE-2008-0542		Gerd Tentler Simple Forum thumbnail.php 目录遍历漏洞
CVE-2008-0541		Gerd Tentler Simple Forum forum.php 多个跨站脚本攻击漏洞
CVE-2008-0540		trixbox 'index.php' 多个跨站脚本攻击漏洞
CVE-2008-0539		F5 BIG-IP 跨站脚本漏洞
CVE-2008-0538		phpip_management 多个SQL注入漏洞
CVE-2007-6697		SDL_image无效GIF文件LWZ Minimum Code Size远程缓冲区溢出漏洞
CVE-2007-6696		webCalendar 多个跨站脚本攻击漏洞
CVE-2007-6695		Drake CMS 'index.php'跨站脚本攻击漏洞

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2008-0544

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2008-0544

Quick assessment

Possible ATT&CK Techniques 2 AI

I. Basic Information for CVE-2008-0544

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2008-0544

III. Intelligence Information for CVE-2008-0544

Vendor Advisories for CVE-2008-0544 (13)

Other References for CVE-2008-0544 (8)

Same Patch Batch · n/a · 2008-02-01 · 19 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2008-0544

Leave a comment