PT-2006-1078 · Enlightenment Foundation Libraries · Imlib2

M. Joonas Pihlaja

·

Publicado

2006-11-07

·

Atualizado

2017-07-20

·

CVE-2006-4809

CVSS v2.0

5.1

Média

VetorAV:N/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: imlib2 versions prior to 1.3.0 imlib2 versions prior to 1.2.1
Description: The issue is related to a stack-based buffer overflow in the loader pnm.c file of imlib2, which can be exploited by remote attackers using a crafted PNM image. This could lead to a denial of service (crash) and potentially allow the execution of arbitrary code. Additionally, there are multiple vulnerabilities in imlib2 that can compromise the confidentiality, integrity, and availability of protected information, and these can be exploited remotely.
Recommendations: For versions prior to 1.2.1, update to version 1.2.1 or later to resolve the issue. For versions prior to 1.3.0, update to version 1.3.0 or later to address the multiple vulnerabilities.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

BDU:2015-09534
CVE-2006-4809

Produtos afetados

Imlib2