PT-2008-1135 · Imlib2 · Imlib2
Stefan Cornelius
·
Publicado
2008-06-02
·
Atualizado
2024-06-15
·
CVE-2008-2426
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Imlib2 versions 1.4.0 and earlier
Description
The issue is related to multiple stack-based buffer overflows that can be triggered by user-assisted remote attacks. This can lead to a denial of service (crash) or possibly the execution of arbitrary code. The overflows are related to the load function in two specific modules:
loader pnm.c for PNM images with crafted headers and loader xpm.c for crafted XPM images. Exploitation of this issue may compromise the confidentiality, integrity, and availability of protected information and can be achieved remotely.Recommendations
For Imlib2 versions 1.4.0 and earlier, consider updating to a version later than 1.4.0 to mitigate the risk of exploitation.
As a temporary workaround, consider restricting the use of the load functions in
loader pnm.c and loader xpm.c until a patch is available.
Avoid using crafted PNM or XPM images in the affected API endpoints until the issue is resolved.Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Imlib2