Vulnerability Report

CVE-2008-4316

Title: Gnome Glib RCE

Memory Corruption

Proof Of Concept

No public PoC currently indexed for CVE-2008-4316.

CWE Category CWE-189

Published Date Mar 14, 2009

Modified Date Jun 16, 2026

Exploit Status Not Found

Score 4.6 CVSS v2.0

Exploit Probability (EPSS)

0.49%

Vulnerability Summary

CVE-2008-4316: Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either (1) from or (2) to a base64 representation.

Impacted Vendors

gnome 1

Reference Links

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00014.html http://lists.vmware.com/pipermail/security-announce/2010/000082.html http://ocert.org/patches/2008-015/glib-CVE-2008-4316.diff http://openwall.com/lists/oss-security/2009/03/12/2 http://secunia.com/advisories/34267 http://secunia.com/advisories/34317 http://secunia.com/advisories/34404 http://secunia.com/advisories/34416 http://secunia.com/advisories/34560 http://secunia.com/advisories/34854 http://secunia.com/advisories/34890 http://secunia.com/advisories/38794 http://secunia.com/advisories/38833 http://svn.gnome.org/viewvc/glib?view=revision&revision=7973 http://wiki.rpath.com/Advisories:rPSA-2009-0045 http://www.debian.org/security/2009/dsa-1747 http://www.mandriva.com/security/advisories?name=MDVSA-2009:080 http://www.ocert.org/advisories/ocert-2008-015.html http://www.openwall.com/lists/oss-security/2009/03/16/2 http://www.redhat.com/archives/fedora-package-announce/2009-April/msg00744.html http://www.redhat.com/support/errata/RHSA-2009-0336.html http://www.securityfocus.com/archive/1/501712/100/0/threaded http://www.securityfocus.com/archive/1/501766/100/0/threaded http://www.securityfocus.com/bid/34100 http://www.securitytracker.com/id?1021884 http://www.ubuntu.com/usn/usn-738-1 http://www.vupen.com/english/advisories/2010/0528 https://exchange.xforce.ibmcloud.com/vulnerabilities/49272 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11401 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8360 https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01113.html http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00014.html http://lists.vmware.com/pipermail/security-announce/2010/000082.html http://ocert.org/patches/2008-015/glib-CVE-2008-4316.diff http://openwall.com/lists/oss-security/2009/03/12/2 http://secunia.com/advisories/34267 http://secunia.com/advisories/34317 http://secunia.com/advisories/34404 http://secunia.com/advisories/34416 http://secunia.com/advisories/34560 http://secunia.com/advisories/34854 http://secunia.com/advisories/34890 http://secunia.com/advisories/38794 http://secunia.com/advisories/38833 http://svn.gnome.org/viewvc/glib?view=revision&revision=7973 http://wiki.rpath.com/Advisories:rPSA-2009-0045 http://www.debian.org/security/2009/dsa-1747 http://www.mandriva.com/security/advisories?name=MDVSA-2009:080 http://www.ocert.org/advisories/ocert-2008-015.html http://www.openwall.com/lists/oss-security/2009/03/16/2 http://www.redhat.com/archives/fedora-package-announce/2009-April/msg00744.html http://www.redhat.com/support/errata/RHSA-2009-0336.html http://www.securityfocus.com/archive/1/501712/100/0/threaded http://www.securityfocus.com/archive/1/501766/100/0/threaded http://www.securityfocus.com/bid/34100 http://www.securitytracker.com/id?1021884 http://www.ubuntu.com/usn/usn-738-1 http://www.vupen.com/english/advisories/2010/0528 https://exchange.xforce.ibmcloud.com/vulnerabilities/49272 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11401 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8360 https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01113.html

CVSS v2.0

Source Entity [email protected]

Severity MEDIUM

4.6

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:L/AC:L/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2008-4316 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 09, 2025 MODIFIED

Vulnerability data or affected products updated.

March 14, 2009 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.