Lucene search
+L

410 matches found

Fedora
Fedora
added 2008/11/26 6:16 a.m.29 views

[SECURITY] Fedora 9 Update: imlib2-1.4.2-2.fc9

Imlib 2 is a library that does image file loading and saving as well as rendering, manipulation, arbitrary polygon support, etc. It does ALL of these operations FAST. Imlib2 also tries to be highly intelligent about doing them, so writing naive programs can be done easily, without sacrificing...

9.3CVSS1.4AI score0.05748EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2008/11/26 12:0 a.m.22 views

Fedora 8 : imlib2-1.4.2-2.fc8 (2008-10296)

Sun Nov 23 2008 Tomas Smetana 1.4.2-2 - patch for CVE-2008-5187 - Thu Oct 23 2008 Tomas Smetana 1.4.2-1 - new upstream version - Fri May 30 2008 Tomas Smetana 1.4.0-7 - patch for CVE-2008-2426 - Tue Mar 11 2008 Hans de Goede 1.4.0-6 - Disable amd64 assembly optimization. Kills idesk - 222998,...

9.3CVSS5.4AI score0.05748EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2008/11/25 12:0 a.m.17 views

FreeBSD : imlib2 -- XPM processing buffer overflow vulnerability (910486d5-ba4d-11dd-8f23-0019666436c2)

Secunia reports : A vulnerability has been discovered in imlib2, which can be exploited by malicious people to potentially compromise an application using the library. The vulnerability is caused due to a pointer arithmetic error within the 'load' function provided by the XPM loader. This can be...

7.5CVSS6.1AI score0.03641EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2008/11/24 12:0 a.m.17 views

FreeBSD Ports: imlib2, imlib2-nox11

The remote host is missing an update to the system as announced in the referenced advisory. VID 910486d5-ba4d-11dd-8f23-0019666436c2 OpenVAS Vulnerability Test $ Description: Auto generated from VID 910486d5-ba4d-11dd-8f23-0019666436c2 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

9.3CVSS0.05748EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2008/11/24 12:0 a.m.12 views

FreeBSD Ports: imlib2, imlib2-nox11

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.5CVSS7.4AI score0.03641EPSS
SaveExploits0References5
Prion
Prion
added 2008/11/21 2:30 a.m.18 views

Heap overflow

The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XPM file that triggers a "pointer arithmetic error" and a heap-based buffer overflow, a different vulnerability...

7.5CVSS7.5AI score0.05748EPSS
SaveExploits1References18Affected Software1
NVD
NVD
added 2008/11/21 2:30 a.m.18 views

CVE-2008-5187

The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XPM file that triggers a "pointer arithmetic error" and a heap-based buffer overflow, a different vulnerability...

7.5CVSS7.3AI score0.03641EPSS
SaveExploits0References18
UbuntuCve
UbuntuCve
added 2008/11/21 2:30 a.m.26 views

CVE-2008-5187

The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XPM file that triggers a "pointer arithmetic error" and a heap-based buffer overflow, a different vulnerability...

7.5CVSS6.3AI score0.03641EPSS
SaveExploits0References3
OSV
OSV
added 2008/11/21 2:30 a.m.4 views

DEBIAN-CVE-2008-5187

The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XPM file that triggers a "pointer arithmetic error" and a heap-based buffer overflow, a different vulnerability...

7.5CVSS8AI score0.03641EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2008/11/21 2:0 a.m.71 views

CVE-2008-5187

The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XPM file that triggers a "pointer arithmetic error" and a heap-based buffer overflow, a different vulnerability...

7.5CVSS7.3AI score0.03641EPSS
SaveExploits0
CVE
CVE
added 2008/11/21 2:0 a.m.87 views

CVE-2008-5187

CVE-2008-5187 affects imlib2 up to at least 1.4.2, where the XPM loader’s load function can crash or potentially allow code execution via a crafted XPM, caused by a pointer arithmetic error leading to a heap-based buffer overflow. Concrete details in connected advisories confirm this vulnerabilit...

7.5CVSS7.2AI score0.03641EPSS
SaveExploits0References18Affected Software1
Cvelist
Cvelist
added 2008/11/21 2:0 a.m.37 views

CVE-2008-5187

The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XPM file that triggers a "pointer arithmetic error" and a heap-based buffer overflow, a different vulnerability...

7.8AI score0.03641EPSS
SaveExploits0References18
seebug.org
seebug.org
added 2008/11/21 12:0 a.m.16 views

imlib2库load()函数堆溢出漏洞

BUGTRAQ ID: 32371 IMlib2是一个通用的图形加载和渲染库。 IMlib2库的XPM加载器所提供的load函数中存在指针算术错误,如果使用IMlib2库的应用程序加载了恶意的XPM文件的话,就可能触发堆溢出,导致执行任意指令。 Enlightenment Imlib2 1.4.2 Enlightenment ------------- 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本: http://www.enlightenment.org/Libraries/Imlib2/...

6.9AI score
SaveExploits0
FreeBSD
FreeBSD
added 2008/11/20 12:0 a.m.29 views

imlib2 -- XPM processing buffer overflow vulnerability

Secunia reports: A vulnerability has been discovered in imlib2, which can be exploited by malicious people to potentially compromise an application using the library. The vulnerability is caused due to a pointer arithmetic error within the "load" function provided by the XPM loader. This can be...

7.5CVSS6.6AI score0.03641EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.33 views

Gentoo Security Advisory GLSA 200409-12 (imagemagick imlib)

The remote host is missing updates announced in advisory GLSA 200409-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

7.5CVSS0.7AI score0.04871EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.31 views

Gentoo Security Advisory GLSA 200501-19 (imlib2)

The remote host is missing updates announced in advisory GLSA 200501-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

10CVSS1AI score0.04934EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.26 views

Gentoo Security Advisory GLSA 200501-19 (imlib2)

The remote host is missing updates announced in advisory GLSA 200501-19. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.6AI score0.04934EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.20 views

Gentoo Security Advisory GLSA 200612-20 (imlib2)

The remote host is missing updates announced in advisory GLSA 200612-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

5.1CVSS0.4AI score0.04205EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.26 views

Gentoo Security Advisory GLSA 200409-12 (imagemagick imlib)

The remote host is missing updates announced in advisory GLSA 200409-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.6AI score0.04871EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.13 views

Gentoo Security Advisory GLSA 200612-20 (imlib2)

The remote host is missing updates announced in advisory GLSA 200612-20. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.1CVSS6.7AI score0.04205EPSS
SaveExploits0References2
Rows per page
Query Builder