CVE Feed

    Dashboard / CVE / CVE-2008-2426

    CVE-2008-2426

    Multiple stack-based buffer overflows in Imlib 2 (aka imlib2) 1.4.0 allow user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via (1) a PNM image with a crafted header, related to the load function in src/modules/loaders/loader_pnm.c; or (2) a crafted XPM image, related to the load function in src/modules/loader_xpm.c.

    Published:May 29, 2008
    Last Modified:Apr 23, 2026
    EPS:Jun 2, 2008
    EPSS Score:0.07262
    CVSS Score:9.3

    Affected Products

    Vendor
    Carsten Haitzler
    Product
    Imlib2

    Exploits

    No exploit reference

    References

    http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
    http://secunia.com/advisories/30401
    http://secunia.com/advisories/30485
    http://secunia.com/advisories/30572
    http://secunia.com/advisories/30727
    http://secunia.com/advisories/31982
    http://secunia.com/secunia_research/2008-25/advisory/
    http://securitytracker.com/id?1020146
    http://www.debian.org/security/2008/dsa-1594
    http://www.gentoo.org/security/en/glsa/glsa-200806-03.xml
    http://www.mandriva.com/security/advisories?name=MDVSA-2008:123
    http://www.securityfocus.com/archive/1/492739/100/0/threaded
    http://www.securityfocus.com/bid/29417
    http://www.ubuntu.com/usn/USN-697-1
    http://www.vupen.com/english/advisories/2008/1700
    https://exchange.xforce.ibmcloud.com/vulnerabilities/42732
    https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00030.html
    https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00052.html
    https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00113.html
    http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
    http://secunia.com/advisories/30401
    http://secunia.com/advisories/30485
    http://secunia.com/advisories/30572
    http://secunia.com/advisories/30727
    http://secunia.com/advisories/31982
    http://secunia.com/secunia_research/2008-25/advisory/
    http://securitytracker.com/id?1020146
    http://www.debian.org/security/2008/dsa-1594
    http://www.gentoo.org/security/en/glsa/glsa-200806-03.xml
    http://www.mandriva.com/security/advisories?name=MDVSA-2008:123
    http://www.securityfocus.com/archive/1/492739/100/0/threaded
    http://www.securityfocus.com/bid/29417
    http://www.ubuntu.com/usn/USN-697-1
    http://www.vupen.com/english/advisories/2008/1700
    https://exchange.xforce.ibmcloud.com/vulnerabilities/42732
    https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00030.html
    https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00052.html
    https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00113.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High