Published: 06/02/2009 Updated: 08/08/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

imlib2 prior to 1.4.2 allows context-dependent malicious users to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5) PNM, (6) TGA, or (7) XPM file, related to "several heap and stack based buffer overflows - partly due to integer overflows."

Vulnerable Product	Search on Vulmon	Subscribe to Product
enlightenment imlib2
enlightenment imlib2 1.1
enlightenment imlib2 1.0.5
enlightenment imlib2 1.0.4
enlightenment imlib2 1.2.2
enlightenment imlib2 1.2.1
enlightenment imlib2 1.0.1
enlightenment imlib2 1.0
enlightenment imlib2 1.4.0
enlightenment imlib2 1.3.0
enlightenment imlib2 1.0.3
enlightenment imlib2 1.0.2
enlightenment imlib2 1.1.2
enlightenment imlib2 1.1.1

Debian Bug report logs - #576469 imlib2: CVE-2008-6079 multiple vulnerabilities Package: imlib2; Maintainer for imlib2 is Markus Koschany <apo@debianorg>; Reported by: Michael Gilbert <michaelsgilbert@gmailcom> Date: Sun, 4 Apr 2010 22:21:01 UTC Severity: grave Tags: security Found in version 140-12 Fixed in ...

It was discovered that imlib2, a library to load and process several image formats, did not properly process various image file types Several heap and stack based buffer overflows - partly due to integer overflows - in the ARGB, BMP, JPEG, LBM, PNM, TGA and XPM loaders can lead to the execution of arbitrary code via crafted image files For the st ...

NVD-CWE-noinfo http://sourceforge.net/project/shownotes.php?release_id=634778 http://www.securityfocus.com/bid/31880 http://secunia.com/advisories/32354 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=576469 http://secunia.com/advisories/39340 http://www.debian.org/security/2010/dsa-2029 http://www.vupen.com/english/advisories/2010/0803 http://www.vupen.com/english/advisories/2008/2898 https://exchange.xforce.ibmcloud.com/vulnerabilities/46037 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=576469 https://nvd.nist.gov https://www.debian.org/security/./dsa-2029

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-6079

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect