Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2008-5187

Published: 21/11/2008 Updated: 08/03/2011
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Enlightenment

Vulnerability Summary

The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XPM file that triggers a "pointer arithmetic error" and a heap-based buffer overflow, a different vulnerability than CVE-2008-2426.

Vulnerable Product Search on Vulmon Subscribe to Product

enlightenment imlib2 1.4.2

Vendor Advisories

Debian CVElist Bug Report Logs: Crash on loading XPM file
Debian Bug report logs - #505714 Crash on loading XPM file Package: libimlib2; Maintainer for libimlib2 is Markus Koschany <apo@debianorg>; Source for libimlib2 is src:imlib2 (PTS, buildd, popcon) Reported by: Julien Danjou <acid@debianorg> Date: Fri, 14 Nov 2008 15:09:02 UTC Severity: grave Tags: patch, security ...
Ubuntu Security Notice: imlib2 vulnerability
It was discovered that Imlib2 did not correctly handle certain malformed XPM images If a user were tricked into opening a specially crafted image with an application that uses Imlib2, an attacker could cause a denial of service and possibly execute arbitrary code with the user’s privileges ...

References

CWE-119http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505714#15http://secunia.com/advisories/32796http://www.openwall.com/lists/oss-security/2008/11/20/5http://secunia.com/advisories/32843https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00856.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-November/msg00858.htmlhttp://osvdb.org/49970http://www.debian.org/security/2008/dsa-1672http://secunia.com/advisories/32949http://security.gentoo.org/glsa/glsa-200812-23.xmlhttp://secunia.com/advisories/33323http://secunia.com/advisories/32963http://secunia.com/advisories/33568http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2009:019http://www.securityfocus.com/bid/32371http://www.ubuntu.com/usn/USN-683-1http://www.vupen.com/english/advisories/2008/3212https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505714https://usn.ubuntu.com/683-1/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3661open redirectCVE-2024-25512CVE-2024-33788command injectionSSTICVE-2024-0043CVE-2024-29210CVE-2024-25510
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook