Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2008-5187HistoryNov 21, 2008 - 2:30 a.m.
CVE-2008-5187
2008-11-2102:30:00
Debian Security Bug Tracker
security-tracker.debian.org
25
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.058
Percentile
93.4%
The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XPM file that triggers a βpointer arithmetic errorβ and a heap-based buffer overflow, a different vulnerability than CVE-2008-2426.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | imlib2 | <Β 1.4.0-1.2 | imlib2_1.4.0-1.2_all.deb |
| Debian | 11 | all | imlib2 | <Β 1.4.0-1.2 | imlib2_1.4.0-1.2_all.deb |
| Debian | 999 | all | imlib2 | <Β 1.4.0-1.2 | imlib2_1.4.0-1.2_all.deb |
| Debian | 13 | all | imlib2 | <Β 1.4.0-1.2 | imlib2_1.4.0-1.2_all.deb |
Related
openvas
openvas
FreeBSD Ports: imlib2, imlib2-nox11
2008-11-24 00:00:00
Fedora Update for imlib2 FEDORA-2008-10296
2009-02-16 00:00:00
Fedora Update for imlib2 FEDORA-2008-10296
2009-02-16 00:00:00
nessus
nessus
Fedora 8 : imlib2-1.4.2-2.fc8 (2008-10296)
2008-11-26 00:00:00
Fedora 9 : imlib2-1.4.2-2.fc9 (2008-10287)
2008-11-26 00:00:00
Fedora 10 : imlib2-1.4.2-2.fc10 (2008-10364)
2009-04-23 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: imlib2-1.4.2-2.fc8
2008-11-26 06:17:17
[SECURITY] Fedora 9 Update: imlib2-1.4.2-2.fc9
2008-11-26 06:16:53
[SECURITY] Fedora 10 Update: imlib2-1.4.2-2.fc10
2008-11-26 06:21:47
cve
cve
CVE-2008-5187
2008-11-21 02:30:00
CVE-2008-2426
2008-06-02 21:30:00
nvd
nvd
CVE-2008-5187
2008-11-21 02:30:00
CVE-2008-2426
2008-06-02 21:30:00
ubuntucve
ubuntucve
CVE-2008-5187
2008-11-21 00:00:00
CVE-2008-2426
2008-06-02 00:00:00
prion
prion
Heap overflow
2008-11-21 02:30:00
Stack overflow
2008-06-02 21:30:00
cvelist
cvelist
CVE-2008-5187
2008-11-21 02:00:00
CVE-2008-2426
2008-06-02 14:00:00
osv
osv
imlib2-1.7.1-1.6 on GA media
2024-06-15 00:00:00
securityvulns
securityvulns
imlib2 library buffer overflow
2008-05-29 00:00:00
[Full-disclosure] [USN-683-1] Imlib2 vulnerability
2008-12-02 00:00:00
Secunia Research: imlib2 PNM and XPM Buffer Overflow
2008-05-29 00:00:00
debian
debian
[SECURITY] [DSA 1672-1] New imlib2 packages fix arbitrary code execution
2008-11-29 02:28:21
[SECURITY] [DSA 1594-1] New imlib2 packages fix arbitrary code execution
2008-06-11 20:31:58
freebsd
freebsd
imlib2 -- XPM processing buffer overflow vulnerability
2008-11-20 00:00:00
gentoo
gentoo
Imlib2: User-assisted execution of arbitrary code
2008-12-23 00:00:00
Imlib 2: User-assisted execution of arbitrary code
2008-06-08 00:00:00
ubuntu
ubuntu
Imlib2 vulnerability
2008-12-02 00:00:00
Imlib2 vulnerability
2008-12-22 00:00:00
debiancve
debiancve
CVE-2008-2426
2008-06-02 21:30:00
seebug
seebug
imlib2εΊε€δΈͺζ ζΊ’εΊζΌζ΄
2008-06-01 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.058
Percentile
93.4%
Related for DEBIANCVE:CVE-2008-5187