CVE-2008-6079

imlib2: New upstream release 1.4.2 contains security updates

Published Feb 6, 2009 CVSS 2.0 · 10.0 Critical EPSS 2.8% KEV · Not listed
Description
imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5) PNM, (6) TGA, or (7) XPM file, related to "several heap and stack based buffer overflows - partly due to integer overflows."

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2029-1 New imlib2 packages fix arbitrary code execution
EUVD EUVD EUVD-2008-6049 imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5) PNM, (6) TGA, or (7) XPM file, related to "several heap and stack based buffer overflows - partly due to integer overflows."
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 11:20 AM
Reserved
Feb 5, 2009, 12:00 AM
Status
Modified
Published
Feb 6, 2009, 11:30 AM
Modified
Jun 16, 2026, 11:01 PM
Severity
Public date
Oct 21, 2008, 12:00 AM