CVSS: 7.8EPSS: 2%CPEs: 1EXPL: 0CVE-2008-5187
https://notcve.org/view.php?id=CVE-2008-5187
21 Nov 2008 — The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XPM file that triggers a "pointer arithmetic error" and a heap-based buffer overflow, a different vulnerability than CVE-2008-2426. La función de carga en el cargador XPM para imlib2 v1.4.2, y posiblemente otras versiones, que permite a atacantes producir una denegación de servicio (caída) y posiblemente una ejecución de có... • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505714#15 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 9%CPEs: 1EXPL: 0CVE-2008-2426
https://notcve.org/view.php?id=CVE-2008-2426
02 Jun 2008 — Multiple stack-based buffer overflows in Imlib 2 (aka imlib2) 1.4.0 allow user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via (1) a PNM image with a crafted header, related to the load function in src/modules/loaders/loader_pnm.c; or (2) a crafted XPM image, related to the load function in src/modules/loader_xpm.c. Múltiples desbordamientos de búfer en la región stack de la memoria en Imlib 2 (también se conoce como imlib2) versión 1.4.0, permiten a los... • http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 9%CPEs: 12EXPL: 0CVE-2006-4806
https://notcve.org/view.php?id=CVE-2006-4806
07 Nov 2006 — Multiple integer overflows in imlib2 allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) ARGB (loader_argb.c), (2) PNG (loader_png.c), (3) LBM (loader_lbm.c), (4) JPEG (loader_jpeg.c), or (5) TIFF (loader_tiff.c) images. Mútiples desbordamientos de enteros en imlib2 permite a un atacante remoto con la intervención del usuario provocar denegación de servicio (caida) y posiblemente ejecución ed código de su elección a través de imágen... • http://secunia.com/advisories/22732 •
CVSS: 7.1EPSS: 2%CPEs: 9EXPL: 0CVE-2006-4807
https://notcve.org/view.php?id=CVE-2006-4807
07 Nov 2006 — loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) via a crafted TGA image that triggers an out-of-bounds memory read, a different issue than CVE-2006-4808. loader_tga.c en imlib2 anterior a 1.2.1, y posiblemenet otras versiones, permite a un atacante remoto con la intervención de un usuario provocar denegación de servicio (caida) a través de imágenes TGA manipuladas que disparan una lectura de memoria fuera de rango, ... • http://secunia.com/advisories/22732 •
CVSS: 7.8EPSS: 4%CPEs: 9EXPL: 0CVE-2006-4808
https://notcve.org/view.php?id=CVE-2006-4808
07 Nov 2006 — Heap-based buffer overflow in loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TGA image. Desbordamiento de búfer basado en montículo en loader_tga.c en imlib2 anterior a 1.2.1, y posiblemente otras versiones, permite a atacantes con la intervención del usuario provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante una image... • http://secunia.com/advisories/22732 •
CVSS: 7.8EPSS: 5%CPEs: 9EXPL: 0CVE-2006-4809
https://notcve.org/view.php?id=CVE-2006-4809
07 Nov 2006 — Stack-based buffer overflow in loader_pnm.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNM image. Desbordamiento de búfer basado en pila en loader_pnm.c en imlib2 anterior a 1.2.1, y posiblemente otras versiones, permite a un atacante remoto con la intervención del usuario provocar denegación de servicio (caida) y posiblemente ejecutar código de su elecciòn a través de una i... • http://secunia.com/advisories/22732 •
CVSS: 8.8EPSS: 6%CPEs: 73EXPL: 0CVE-2004-0802
https://notcve.org/view.php?id=CVE-2004-0802
24 Sep 2004 — Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817. • http://cvs.sourceforge.net/viewcvs.py/enlightenment/e17/libs/imlib2/ChangeLog?rev=1.20&view=markup •
CVSS: 9.1EPSS: 3%CPEs: 73EXPL: 0CVE-2004-0817
https://notcve.org/view.php?id=CVE-2004-0817
17 Sep 2004 — Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file. • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870 •
CVSS: 8.8EPSS: 3%CPEs: 73EXPL: 0CVE-2004-0827
https://notcve.org/view.php?id=CVE-2004-0827
16 Sep 2004 — Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files. • http://secunia.com/advisories/28800 •