Lucene search

K
ubuntuUbuntuUSN-595-1
HistoryMar 26, 2008 - 12:00 a.m.

SDL_image vulnerabilities

2008-03-2600:00:00
ubuntu.com
32

7.4 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.165 Low

EPSS

Percentile

95.9%

Releases

  • Ubuntu 7.10
  • Ubuntu 7.04
  • Ubuntu 6.10
  • Ubuntu 6.06

Packages

  • sdl-image1.2 -

Details

Michael Skladnikiewicz discovered that SDL_image did not correctly load
GIF images. If a user or automated system were tricked into processing
a specially crafted GIF, a remote attacker could execute arbitrary code
or cause a crash, leading to a denial of service. (CVE-2007-6697)

David Raulo discovered that SDL_image did not correctly load ILBM images.
If a user or automated system were tricked into processing a specially
crafted ILBM, a remote attacker could execute arbitrary code or cause
a crash, leading to a denial of service. (CVE-2008-0544)

OSVersionArchitecturePackageVersionFilename
Ubuntu7.10noarchlibsdl-image1.2< 1.2.5-3ubuntu0.1UNKNOWN
Ubuntu7.10noarchlibsdl-image1.2-dev< 1.2.5-3ubuntu0.1UNKNOWN
Ubuntu7.04noarchlibsdl-image1.2< 1.2.5-2ubuntu0.7.04.1UNKNOWN
Ubuntu7.04noarchlibsdl-image1.2-dev< 1.2.5-2ubuntu0.7.04.1UNKNOWN
Ubuntu6.10noarchlibsdl-image1.2< 1.2.5-2ubuntu0.6.10.1UNKNOWN
Ubuntu6.10noarchlibsdl-image1.2-dev< 1.2.5-2ubuntu0.6.10.1UNKNOWN
Ubuntu6.06noarchlibsdl-image1.2< 1.2.4-1ubuntu0.1UNKNOWN
Ubuntu6.06noarchlibsdl-image1.2-dev< 1.2.4-1ubuntu0.1UNKNOWN

7.4 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.165 Low

EPSS

Percentile

95.9%