PT-2006-1076 · Enlightenment · Imlib2

M. Joonas Pihlaja · Published 2006-11-07 · Updated 2017-07-20 · CVE-2006-4807

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: imlib2 versions prior to 1.3.0 imlib2 versions prior to 1.2.1

Description: The issue allows remote attackers to cause a denial of service, potentially leading to disruption of confidentiality, integrity, and availability of protected information. This can be achieved through user-assisted exploitation, such as via a crafted TGA image that triggers an out-of-bounds memory read.

Recommendations: For imlib2 versions prior to 1.2.1, update to version 1.2.1 or later to resolve the issue. For imlib2 versions prior to 1.3.0, update to version 1.3.0 or later to resolve the issue.

Fix

Related Identifiers

BDU:2015-09534

CVE-2006-4807

Affected Products

Imlib2

References · 21

• http://novell.com/linux/security/advisories/2006_26_sr.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-4807 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200612-20.xml · Vendor Advisory
• http://secunia.com/advisories/22752 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:198 · Vendor Advisory
• http://secunia.com/advisories/22744 · Vendor Advisory
• http://ubuntu.com/usn/usn-376-1 · Vendor Advisory
• http://secunia.com/advisories/22732 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09534 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2006-4807 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2007:156 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-4807 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-4807 · Vendor Advisory
• http://secunia.com/advisories/22932 · Note
• http://ubuntu.com/usn/usn-376-2 · Patch, Vendor Advisory