7.5

CVE-2008-5187

The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XPM file that triggers a "pointer arithmetic error" and a heap-based buffer overflow, a different vulnerability than CVE-2008-2426.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Enlightenment ≫ Imlib2 Version1.4.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.64% 0.881
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
http://secunia.com/advisories/33568
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505714#15
http://osvdb.org/49970
http://secunia.com/advisories/32796
Vendor Advisory
http://secunia.com/advisories/32843
http://secunia.com/advisories/32949
http://secunia.com/advisories/32963
http://secunia.com/advisories/33323
http://security.gentoo.org/glsa/glsa-200812-23.xml
http://www.debian.org/security/2008/dsa-1672
http://www.mandriva.com/security/advisories?name=MDVSA-2009:019
http://www.openwall.com/lists/oss-security/2008/11/20/5
http://www.securityfocus.com/bid/32371
http://www.ubuntu.com/usn/USN-683-1
http://www.vupen.com/english/advisories/2008/3212
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00856.html
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00858.html