CVE-2008-5187
Fixed in a distro release EPSS 4%
The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XPM file that triggers a "pointer arithmetic error" and a heap-based buffer overflow, a different vulnerability than CVE-2008-2426.
Products: enlightenment imlib2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | imlib2 | 1.4.0-1.2 |
| Debian 13 | imlib2 | 1.4.0-1.2 |
| Debian 14 | imlib2 | 1.4.0-1.2 |
| Debian 4.0 | imlib2 | 1.3.0.0debian1-4+etch2 |
| openSUSE Tumbleweed | imlib2 | 1.7.1-1.6 |