CVE-2010-0991

Multiple heap-based buffer overflows in imlib2 1.4.3 allow context-dependent attackers to execute arbitrary code via a crafted 1 ARGB, 2 XPM, or 3 BMP file, related to the IMAGEDIMENSIONSOK macro in lib/image.h...

CVE-2010-0991

Multiple heap-based buffer overflows in imlib2 1.4.3 allow context-dependent attackers to execute arbitrary code via a crafted 1 ARGB, 2 XPM, or 3 BMP file, related to the IMAGEDIMENSIONSOK macro in lib/image.h...

CVE-2010-0991

CVE-2010-0991 affects imlib2 1.4.3, where heap-based buffer overflows can be triggered by crafted ARGB, XPM, or BMP files due to a logic error in the IMAGE_DIMENSIONS_OK macro in lib/image.h. This has been documented across multiple sources; some advisories note the issue and reference a fix in l...

CVE-2010-0991

Multiple heap-based buffer overflows in imlib2 1.4.3 allow context-dependent attackers to execute arbitrary code via a crafted 1 ARGB, 2 XPM, or 3 BMP file, related to the IMAGEDIMENSIONSOK macro in lib/image.h...

CVE-2010-0991

Multiple heap-based buffer overflows in imlib2 1.4.3 allow context-dependent attackers to execute arbitrary code via a crafted 1 ARGB, 2 XPM, or 3 BMP file, related to the IMAGEDIMENSIONSOK macro in lib/image.h...

Debian Security Advisory DSA 2029-1 (imlib2)

The remote host is missing an update to imlib2 announced via advisory DSA 2029-1. OpenVAS Vulnerability Test $Id: deb20291.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2029-1 imlib2 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-2029-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2029-1] New imlib2 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA-2029-1 [email protected] http://www.debian.org/security/ Nico Golde April 5th, 2010 http://www.debian.org/security/faq -...

DSA-2029-1 imlib2 - arbitrary code execution

Bulletin has no description...

openSUSE Security Update : imlib2 (imlib2-178)

This update fixes two security problems in imlib2. Specially crafted xpm files could trigger a stack based buffer overflow in imlib2 which could potentially be exploited to execute arbitrary code CVE-2008-2426. A crash in PNM handling due to a NULL pointer dereference was fixed. %NASLMINLEVEL 703...

openSUSE Security Update : imlib2 (imlib2-318)

A security problem was fixed in imlib2 where loading a specific XPM file could corrupt memory. CVE-2008-5187 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update imlib2-318. The text description of...

Mandrake Linux Security Advisory : imlib2 (MDKSA-2007:156)

M Joonas Pihlaja discovered several vulnerabilities in the Imlib2 graphics library. The load function of several of the Imlib2 image loaders does not check the width and height of an image before allocating memory. As a result, a carefully crafted image file can trigger a segfault when an...

Mandriva Linux Security Advisory : imlib2 (MDVSA-2008:123)

Stefan Cornelius discovered two buffer overflows in Imlib's image loaders for PNM and XPM images, which could possibly result in the execution of arbitrary code CVE-2008-2426. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS : imlib2 vulnerability (USN-697-1)

It was discovered that Imlib2 did not correctly handle certain malformed XPM and PNG images. If a user were tricked into opening a specially crafted image with an application that uses Imlib2, an attacker could cause a denial of service and possibly execute arbitrary code with the user's...

FreeBSD : imlib2 -- BMP decoder buffer overflow (ba005226-fb5b-11d8-9837-000c41e2cdad)

Marcus Meissner discovered that imlib2's BMP decoder would crash when loading the test BMP file created by Chris Evans for testing the previous Qt vulnerability. There appears to be both a stack-based and a heap-based buffer overflow that are believed to be exploitable for arbitrary code executio...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : imlib2 vulnerability (USN-683-1)

It was discovered that Imlib2 did not correctly handle certain malformed XPM images. If a user were tricked into opening a specially crafted image with an application that uses Imlib2, an attacker could cause a denial of service and possibly execute arbitrary code with the user's privileges. Note...

Fedora 10 : imlib2-1.4.2-2.fc10 (2008-10364)

Sun Nov 23 2008 Tomas Smetana 1.4.2-2 - patch for CVE-2008-5187 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Mandriva Linux Security Advisory : imlib2 (MDVSA-2009:019)

A vulnerability have been discovered in the load function of the XPM loader for imlib2, which allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XPM file CVE-2008-5187. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C...

Mandriva Update for imlib2 MDVSA-2008:123 (imlib2)

Check for the Version of imlib2 OpenVAS Vulnerability Test Mandriva Update for imlib2 MDVSA-2008:123 imlib2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Ubuntu Update for imlib2 vulnerability USN-683-1

Ubuntu Update for Linux kernel vulnerabilities USN-683-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6831.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for imlib2 vulnerability USN-683-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...