Lucene search

K
freebsdFreeBSD910486D5-BA4D-11DD-8F23-0019666436C2
HistoryNov 20, 2008 - 12:00 a.m.

imlib2 -- XPM processing buffer overflow vulnerability

2008-11-2000:00:00
vuxml.freebsd.org
16

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.6%

Secunia reports:

A vulnerability has been discovered in imlib2, which can
be exploited by malicious people to potentially compromise
an application using the library.
The vulnerability is caused due to a pointer arithmetic
error within the “load()” function provided by the XPM
loader. This can be exploited to cause a heap-based buffer
overflow via a specially crafted XPM file.
Successful exploitation may allow execution of arbitrary
code.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchimlib2< 1.4.1.000_1,2UNKNOWN
FreeBSDanynoarchimlib2-nox11< 1.4.1.000_1,2UNKNOWN

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.6%