Imlib2 vulnerability

2008-12-2200:00:00

ubuntu.com

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.058

Percentile

93.4%

JSON

Releases

Ubuntu 8.04
Ubuntu 7.10
Ubuntu 6.06

Packages

imlib2 -

Details

It was discovered that Imlib2 did not correctly handle certain malformed XPM
and PNG images. If a user were tricked into opening a specially crafted image
with an application that uses Imlib2, an attacker could cause a denial of
service and possibly execute arbitrary code with the user’s privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchlibimlib2< 1.4.0-1ubuntu1.2UNKNOWN
Ubuntu8.04noarchlibimlib2-dev< 1.4.0-1ubuntu1.2UNKNOWN
Ubuntu7.10noarchlibimlib2< 1.3.0.0debian1-4ubuntu0.2UNKNOWN
Ubuntu7.10noarchlibimlib2-dev< 1.3.0.0debian1-4ubuntu0.2UNKNOWN
Ubuntu6.06noarchlibimlib2< 1.2.1-2ubuntu0.4UNKNOWN
Ubuntu6.06noarchlibimlib2-dev< 1.2.1-2ubuntu0.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.04	noarch	libimlib2	< 1.4.0-1ubuntu1.2	UNKNOWN
Ubuntu	8.04	noarch	libimlib2-dev	< 1.4.0-1ubuntu1.2	UNKNOWN
Ubuntu	7.10	noarch	libimlib2	< 1.3.0.0debian1-4ubuntu0.2	UNKNOWN
Ubuntu	7.10	noarch	libimlib2-dev	< 1.3.0.0debian1-4ubuntu0.2	UNKNOWN
Ubuntu	6.06	noarch	libimlib2	< 1.2.1-2ubuntu0.4	UNKNOWN
Ubuntu	6.06	noarch	libimlib2-dev	< 1.2.1-2ubuntu0.4	UNKNOWN