Lucene search
HistoryJan 10, 2005 - 5:00 a.m.
CVE-2004-1025
cve-2004-1025
heap-based buffer overflows
imlib
gkrellm
window managers
denial of service
arbitrary code
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.022 Low
EPSS
Percentile
89.7%
Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.
Affected configurations
Node
enlightenmentimlibMatch1.9.13
ORenlightenmentimlibMatch1.9.14
Node
gentoolinux
ORredhatlinuxMatch7.3
ORredhatlinuxMatch7.3i386
ORredhatlinuxMatch7.3i686
ORredhatlinuxMatch9.0i386
| CPE | Name | Operator | Version |
|---|---|---|---|
| enlightenment:imlib | enlightenment imlib | eq | 1.9.13 |
| enlightenment:imlib | enlightenment imlib | eq | 1.9.14 |
Related
cvelist
cvelist
CVE-2004-1025
2004-12-15 05:00:00
nvd
nvd
CVE-2004-1025
2005-01-10 05:00:00
ubuntucve
ubuntucve
CVE-2004-1025
2005-01-10 00:00:00
openvas
openvas
Debian Security Advisory DSA 628-1 (imlib2)
2008-01-17 00:00:00
FreeBSD Ports: imlib
2008-09-04 00:00:00
Debian: Security Advisory (DSA-618-1)
2008-01-17 00:00:00
osv
osv
imlib2 - integer overflows
2005-01-06 00:00:00
imlib - buffer overflows, integer overflows
2004-12-24 00:00:00
debian
debian
[SECURITY] [DSA 618-1] New imlib packages fix arbitrary code execution
2004-12-24 16:40:42
[SECURITY] [DSA 628-1] New imlib2 packages fix arbitrary code execution
2005-01-06 16:53:22
[SECURITY] [DSA 618-1] New imlib packages fix arbitrary code execution
2004-12-24 16:40:42
ubuntu
ubuntu
imlib vulnerabilities
2004-12-29 00:00:00
imlib2 vulnerabilities
2005-01-07 00:00:00
nessus
nessus
Debian DSA-628-1 : imlib2 - integer overflows
2005-01-06 00:00:00
RHEL 2.1 / 3 : imlib (RHSA-2004:651)
2004-12-13 00:00:00
Ubuntu 4.10 : imlib2 vulnerabilities (USN-55-1)
2006-01-15 00:00:00
redhat
redhat
(RHSA-2004:651) imlib security update
2004-12-23 00:00:00
freebsd
freebsd
imlib -- xpm heap buffer overflows and integer overflows
2004-12-06 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.022 Low
EPSS
Percentile
89.7%
Related for CVE-2004-1025