PT-2006-1078 · Enlightenment Foundation Libraries · Imlib2

M. Joonas Pihlaja · Published 2006-11-07 · Updated 2017-07-20 · CVE-2006-4809

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: imlib2 versions prior to 1.3.0 imlib2 versions prior to 1.2.1

Description: The issue is related to a stack-based buffer overflow in the loader pnm.c file of imlib2, which can be exploited by remote attackers using a crafted PNM image. This could lead to a denial of service (crash) and potentially allow the execution of arbitrary code. Additionally, there are multiple vulnerabilities in imlib2 that can compromise the confidentiality, integrity, and availability of protected information, and these can be exploited remotely.

Recommendations: For versions prior to 1.2.1, update to version 1.2.1 or later to resolve the issue. For versions prior to 1.3.0, update to version 1.3.0 or later to address the multiple vulnerabilities.

Fix

Related Identifiers

BDU:2015-09534

CVE-2006-4809

Affected Products

Imlib2

References · 21

• http://novell.com/linux/security/advisories/2006_26_sr.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200612-20.xml · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-4809 · Vendor Advisory
• http://secunia.com/advisories/22752 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:198 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-4809 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-4809 · Vendor Advisory
• http://secunia.com/advisories/22744 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4809 · Security Note
• http://secunia.com/advisories/22732 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09534 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2007:156 · Vendor Advisory
• http://secunia.com/advisories/22932 · Note
• http://ubuntu.com/usn/usn-376-2 · Patch, Vendor Advisory
• http://secunia.com/advisories/23441 · Note