Lucene search

K
osvGoogleOSV:DSA-552-1
HistorySep 22, 2004 - 12:00 a.m.

imlib2 - unsanitised input

2004-09-2200:00:00
Google
osv.dev
4

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

Marcus Meissner discovered a heap overflow error in imlib2, an imaging
library for X and X11 and the successor of imlib, that may be utilised
by an attacker to execute arbitrary code on the victims machine.

For the stable distribution (woody) this problem has been fixed in
version 1.0.5-2woody1.

For the unstable distribution (sid) this problem has been fixed in
version 1.1.0-12.4.

We recommend that you upgrade your imlib2 packages.

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P