CVE-2008-2426
Critical
Description
Multiple stack-based buffer overflows in Imlib 2 (aka imlib2) 1.4.0 allow user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via (1) a PNM image with a crafted header, related to the load function in src/modules/loaders/loader_pnm.c; or (2) a crafted XPM image, related to the load function in src/modules/loader_xpm.c.
SeverityCritical
CVSS9.3
Exploit probability—
ProductCarsten Haitzler Imlib2
PublishedJun 2, 2008
First seenJun 2, 2008
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| carsten_haitzler imlib2 | 1.4.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.