CVE-2006-4807

2006-11-0700:07:00

Debian Security Bug Tracker

security-tracker.debian.org

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.075 Low

EPSS

Percentile

94.1%

JSON

loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) via a crafted TGA image that triggers an out-of-bounds memory read, a different issue than CVE-2006-4808.

OSVersionArchitecturePackageVersionFilename
Debian12allimlib2< 1.3.0.0debian1-3imlib2_1.3.0.0debian1-3_all.deb
Debian11allimlib2< 1.3.0.0debian1-3imlib2_1.3.0.0debian1-3_all.deb
Debian10allimlib2< 1.3.0.0debian1-3imlib2_1.3.0.0debian1-3_all.deb
Debian999allimlib2< 1.3.0.0debian1-3imlib2_1.3.0.0debian1-3_all.deb
Debian13allimlib2< 1.3.0.0debian1-3imlib2_1.3.0.0debian1-3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	imlib2	< 1.3.0.0debian1-3	imlib2_1.3.0.0debian1-3_all.deb
Debian	11	all	imlib2	< 1.3.0.0debian1-3	imlib2_1.3.0.0debian1-3_all.deb
Debian	10	all	imlib2	< 1.3.0.0debian1-3	imlib2_1.3.0.0debian1-3_all.deb
Debian	999	all	imlib2	< 1.3.0.0debian1-3	imlib2_1.3.0.0debian1-3_all.deb
Debian	13	all	imlib2	< 1.3.0.0debian1-3	imlib2_1.3.0.0debian1-3_all.deb