certfr_avis - certa-2008-avi-575

CERTA-2008-AVI-575

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité dans la bibliothèque imlib2 permet à une personne malintentionnée distante de provoquer un déni de service ou potentiellement d'exécuter du code arbitraire.

Description

Une vulnérabilité de type débordement de mémoire a été corrigée dans la fonction load() utilisée pour le chargement de fichiers XPM dans imlib2. L'exploitation de cette vulnérabilité via un fichier spécialement conçu permet à une personne malintentionnée distante de provoquer un déni de service ou potentiellement d'exécuter du code arbitraire sur une application utilisant cette bibliothèque.

Solution

Se référer aux bulletins de sécurité des éditeurs pour l'obtention des correctifs (cf. section Documentation).

imlib2 1.4.2 et versions antérieures.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

CVE-2008-5187 (GCVE-0-2008-5187)

Vulnerability from cvelistv5 – Published: 2008-11-21 02:00 – Updated: 2024-08-07 10:40

Summary

The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XPM file that triggers a "pointer arithmetic error" and a heap-based buffer overflow, a different vulnerability than CVE-2008-2426.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
	http://www.debian.org/security/2008/dsa-1672	vendor-advisoryx_refsource_DEBIAN
	http://secunia.com/advisories/32949	third-party-advisoryx_refsource_SECUNIA
	http://www.openwall.com/lists/oss-security/2008/11/20/5	mailing-listx_refsource_MLIST
	http://secunia.com/advisories/32963	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/33323	third-party-advisoryx_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-683-1	vendor-advisoryx_refsource_UBUNTU
	http://osvdb.org/49970	vdb-entryx_refsource_OSVDB
	http://secunia.com/advisories/32796	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/33568	third-party-advisoryx_refsource_SECUNIA
	http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=…	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/32371	vdb-entryx_refsource_BID
	http://security.gentoo.org/glsa/glsa-200812-23.xml	vendor-advisoryx_refsource_GENTOO
	http://www.vupen.com/english/advisories/2008/3212	vdb-entryx_refsource_VUPEN
	http://secunia.com/advisories/32843	third-party-advisoryx_refsource_SECUNIA
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA
	https://www.redhat.com/archives/fedora-package-an…	vendor-advisoryx_refsource_FEDORA

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:40:17.224Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "MDVSA-2009:019",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:019"
          },
          {
            "name": "DSA-1672",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1672"
          },
          {
            "name": "32949",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32949"
          },
          {
            "name": "[oss-security] 20081120 CVE Request: imlib2",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2008/11/20/5"
          },
          {
            "name": "32963",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32963"
          },
          {
            "name": "33323",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33323"
          },
          {
            "name": "USN-683-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-683-1"
          },
          {
            "name": "49970",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/49970"
          },
          {
            "name": "32796",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32796"
          },
          {
            "name": "SUSE-SR:2009:002",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html"
          },
          {
            "name": "33568",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33568"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505714#15"
          },
          {
            "name": "32371",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32371"
          },
          {
            "name": "GLSA-200812-23",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200812-23.xml"
          },
          {
            "name": "ADV-2008-3212",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3212"
          },
          {
            "name": "32843",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32843"
          },
          {
            "name": "FEDORA-2008-10296",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00858.html"
          },
          {
            "name": "FEDORA-2008-10287",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00856.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-11-20T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XPM file that triggers a \"pointer arithmetic error\" and a heap-based buffer overflow, a different vulnerability than CVE-2008-2426."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2008-12-03T10:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "MDVSA-2009:019",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:019"
        },
        {
          "name": "DSA-1672",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1672"
        },
        {
          "name": "32949",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32949"
        },
        {
          "name": "[oss-security] 20081120 CVE Request: imlib2",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2008/11/20/5"
        },
        {
          "name": "32963",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32963"
        },
        {
          "name": "33323",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33323"
        },
        {
          "name": "USN-683-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-683-1"
        },
        {
          "name": "49970",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/49970"
        },
        {
          "name": "32796",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32796"
        },
        {
          "name": "SUSE-SR:2009:002",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html"
        },
        {
          "name": "33568",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33568"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505714#15"
        },
        {
          "name": "32371",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32371"
        },
        {
          "name": "GLSA-200812-23",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200812-23.xml"
        },
        {
          "name": "ADV-2008-3212",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3212"
        },
        {
          "name": "32843",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32843"
        },
        {
          "name": "FEDORA-2008-10296",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00858.html"
        },
        {
          "name": "FEDORA-2008-10287",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00856.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5187",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XPM file that triggers a \"pointer arithmetic error\" and a heap-based buffer overflow, a different vulnerability than CVE-2008-2426."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "MDVSA-2009:019",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:019"
            },
            {
              "name": "DSA-1672",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1672"
            },
            {
              "name": "32949",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32949"
            },
            {
              "name": "[oss-security] 20081120 CVE Request: imlib2",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2008/11/20/5"
            },
            {
              "name": "32963",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32963"
            },
            {
              "name": "33323",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33323"
            },
            {
              "name": "USN-683-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-683-1"
            },
            {
              "name": "49970",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/49970"
            },
            {
              "name": "32796",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32796"
            },
            {
              "name": "SUSE-SR:2009:002",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html"
            },
            {
              "name": "33568",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33568"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505714#15",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505714#15"
            },
            {
              "name": "32371",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32371"
            },
            {
              "name": "GLSA-200812-23",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200812-23.xml"
            },
            {
              "name": "ADV-2008-3212",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3212"
            },
            {
              "name": "32843",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32843"
            },
            {
              "name": "FEDORA-2008-10296",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00858.html"
            },
            {
              "name": "FEDORA-2008-10287",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00856.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5187",
    "datePublished": "2008-11-21T02:00:00",
    "dateReserved": "2008-11-20T00:00:00",
    "dateUpdated": "2024-08-07T10:40:17.224Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted