Integer overflow

Integer overflow in imlib2 before 1.4.9 on 32-bit platforms allows remote attackers to execute arbitrary code via large dimensions in an image, which triggers an out-of-bounds heap memory write operation...

DEBIAN-CVE-2011-5326

imlib2 before 1.4.9 allows remote attackers to cause a denial of service divide-by-zero error and application crash by drawing a 2x1 ellipse...

Integer overflow

Integer overflow in imlib2 before 1.4.7 allows remote attackers to cause a denial of service memory consumption or application crash via a crafted image, which triggers an invalid read operation...

Design/Logic Flaw

imlib2 before 1.4.7 allows remote attackers to cause a denial of service segmentation fault via a GIF image without a colormap...

Design/Logic Flaw

imlib2 before 1.4.9 allows remote attackers to cause a denial of service divide-by-zero error and application crash by drawing a 2x1 ellipse...

CVE-2014-9763

CVE-2014-9763 affects imlib2 up to version 1.4.6, where handling of PNM files can trigger a division-by-zero in the loader, leading to a remote DoS and application crash. Connected advisories confirm this issue across multiple distros and patch the vulnerability by upgrading to imlib2 1.4.7 or ne...

CVE-2016-4024

CVE-2016-4024 affects imlib2 prior to 1.4.9 on 32-bit platforms, caused by an integer overflow in image dimension handling that leads to an out-of-bounds heap write and remote code execution. Connected advisories (Gentoo GLSA-201611-12, Ubuntu USN-3075-1, Fedora advisories) confirm imlib2 remote ...

CVE-2016-4024

Integer overflow in imlib2 before 1.4.9 on 32-bit platforms allows remote attackers to execute arbitrary code via large dimensions in an image, which triggers an out-of-bounds heap memory write operation...

CVE-2016-3993

CVE-2016-3993 affects the Imlib2 library (imlib2) due to an off-by-one error in the __imlib_MergeUpdate function (lib/updates.c) present before version 1.4.9. This results in an out-of-bounds read and can cause a denial of service (application crash) when processing crafted coordinates. Connected...

CVE-2016-3993

Off-by-one error in the imlibMergeUpdate function in lib/updates.c in imlib2 before 1.4.9 allows remote attackers to cause a denial of service out-of-bounds read and application crash via crafted coordinates...

CVE-2011-5326

imlib2 before 1.4.9 allows remote attackers to cause a denial of service divide-by-zero error and application crash by drawing a 2x1 ellipse...

CVE-2014-9771

Integer overflow in imlib2 before 1.4.7 allows remote attackers to cause a denial of service memory consumption or application crash via a crafted image, which triggers an invalid read operation...

CVE-2016-3994

The CVE-2016-3994 issue affects the GIF loader in imlib2 up to version 1.4.9, caused by an out-of-bounds read that can lead to a denial of service (application crash) or exposure of sensitive information. A fix is available in upstream imlib2 1.4.9 and related security updates (e.g., Ubuntu/Fedor...

CVE-2014-9771

CVE-2014-9771 is an integer overflow in Imlib2 before 1.4.7 that allows remote attackers to cause a denial of service (memory exhaustion or crash) via a crafted image by triggering an invalid read/write during image handling. Public reports in multiple advisories confirm the issue affect the Imli...

CVE-2014-9763

imlib2 before 1.4.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted PNM file...

CVE-2014-9762

imlib2 before 1.4.7 allows remote attackers to cause a denial of service segmentation fault via a GIF image without a colormap...

CVE-2011-5326

CVE-2011-5326 concerns the image library imlib2 . The connected sources confirm a vulnerability in imlib2 prior to version 1.4.9 where the ellipse drawing code could trigger a division-by-zero when rendering a 2x1 ellipse, leading to a denial of service (application crash). The issue is addressed...

CVE-2014-9762

imlib2 before 1.4.7 allows remote attackers to cause a denial of service segmentation fault via a GIF image without a colormap...

CVE-2014-9764

imlib2 before 1.4.7 allows remote attackers to cause a denial of service segmentation fault via a crafted GIF file...

CVE-2016-3994

The GIF loader in imlib2 before 1.4.9 allows remote attackers to cause a denial of service application crash or obtain sensitive information via a crafted image, which triggers an out-of-bounds read...