PT-2010-2714 · Enlightenment · Imlib2

Publicado 2010-04-22 · Atualizado 2024-06-15 · CVE-2010-0991

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions imlib2 version 1.4.3

Description The issue is related to multiple heap-based buffer overflows that can be triggered by crafted files, including ARGB, XPM, or BMP files. This is connected to the IMAGE DIMENSIONS OK macro in lib/image.h, allowing context-dependent attackers to execute arbitrary code.

Recommendations For imlib2 version 1.4.3, consider updating to a newer version that addresses these buffer overflows, as this will likely include patches to prevent the execution of arbitrary code through crafted image files.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-0991

OPENSUSE-SU-2024:10320-1

Produtos afetados

Imlib2

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2010-0991 · Nota de Segurança
• http://securityfocus.com/archive/1/510866/100/0/threaded · Nota
• http://secunia.com/advisories/39354 · Aviso do Fabricante
• http://vupen.com/english/advisories/2010/0959 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2010-0991 · Nota
• http://secunia.com/secunia_research/2010-54 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:10320-1 · Aviso do Fabricante