CVE-2008-3520

EPSS 3.00% · P87 Updated Feb 21, 2026

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-3520

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

JasPer 1.900.1 多个整数值溢出漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

JasPer的多个整数值溢出漏洞，攻击者可以通过一个精心设计的图像文件造成未知影响，它与内存分配的整数值乘法有关。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2008-3520

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2008-3520

请登录查看更多情报信息。

http://bugs.gentoo.org/show_bug.cgi?id=222819x_refsource_MISC
http://www.securityfocus.com/bid/31470vdb-entryx_refsource_BID
http://secunia.com/advisories/34391third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/33173third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-742-1vendor-advisoryx_refsource_UBUNTU
http://www.redhat.com/support/errata/RHSA-2009-0012.htmlvendor-advisoryx_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=MDVSA-2009:142vendor-advisoryx_refsource_MANDRIVA
http://rhn.redhat.com/errata/RHSA-2015-0698.htmlvendor-advisoryx_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=MDVSA-2009:164vendor-advisoryx_refsource_MANDRIVA
http://www.mandriva.com/security/advisories?name=MDVSA-2009:144vendor-advisoryx_refsource_MANDRIVA
http://security.gentoo.org/glsa/glsa-200812-18.xmlvendor-advisoryx_refsource_GENTOO
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606vendor-advisoryx_refsource_SLACKWARE
https://exchange.xforce.ibmcloud.com/vulnerabilities/45621vdb-entryx_refsource_XF
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10141vdb-entrysignaturex_refsource_OVAL
https://nvd.nist.gov/vuln/detail/CVE-2008-3520

Same Patch Batch · n/a · 2008-10-02 · 8 CVEs total

CVE-2008-4396		safer_networking filealyzer 基于栈缓冲区溢出漏洞
CVE-2008-2831		mailmarshal smtp Spam Quarantine Management组件跨站脚本攻击漏洞
CVE-2008-3521		JasPer 后置链接漏洞
CVE-2008-3522		JasPer 1.900.1 缓冲区溢出漏洞
CVE-2008-3542		Hewlett-Packard Insight Diagnostics 未明未授权访问漏洞
CVE-2008-4381		microsoft internet_explorer alert函数资源管理错误漏洞
CVE-2008-4382		KDE Konqueror alert函数资源管理错误漏洞

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2008-3520

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2008-3520

I. Basic Information for CVE-2008-3520

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2008-3520

III. Intelligence Information for CVE-2008-3520

Same Patch Batch · n/a · 2008-10-02 · 8 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2008-3520

Leave a comment