PT-2002-1053 · Imlib · Imlib

Published 2002-03-15 · Updated 2008-09-11 · CVE-2002-0168

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Imlib versions prior to 1.9.13

Description The issue allows attackers to cause a denial of service and possibly execute arbitrary code by manipulating arguments passed to malloc, resulting in heap corruption. Exploitation of the vulnerabilities can lead to disruption of confidentiality, integrity, and availability of protected information and can be carried out remotely.

Recommendations For versions prior to 1.9.13, update to version 1.9.13 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information and implementing additional security measures to minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-08016

BDU:2015-08017

BDU:2015-08018

CVE-2002-0168

Affected Products

Imlib

References · 11

• http://linux-mandrake.com/en/security/2002/MDKSA-2002-029.php · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2002-048.html · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000470 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0168 · Security Note
• https://bdu.fstec.ru/vul/2015-08018 · Security Note
• http://novell.com/linux/security/advisories/2002_015_imlib_txt.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08017 · Security Note
• https://bdu.fstec.ru/vul/2015-08016 · Security Note
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-019.0.txt · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2002-048.html · Note
• http://securityfocus.com/bid/4336 · Note