Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

imlib2 may be compromised by crafted image files

CVE-2008-6079 · published 17 years ago
Summary

The imlib2 library in Debian versions older than 1.4.2 can be tricked into mishandling specially made image files such as BMP, JPEG, or PNG. This can cause the program to crash or behave unpredictably, potentially letting an attacker affect the system. Upgrade imlib2 to version 1.4.2 or later to fix the problem.

What to do
  • Update debian imlib2 to version 1.4.2-1.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian imlib2 < 1.4.2-1
Fix: upgrade to 1.4.2-1
Debian:13 debian imlib2 < 1.4.2-1
Fix: upgrade to 1.4.2-1
Debian:14 debian imlib2 < 1.4.2-1
Fix: upgrade to 1.4.2-1
– enlightenment imlib2 <= 1.4.1
1.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.1
1.1.1
1.1.2
1.2.1
1.2.2
2 more version ranges
cpe:2.3:a:enlightenment:imlib2:*:*:*:*:*:*:*:*
Original advisory text
imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5) PNM, (6) TGA, or (7) XPM file, related to "several heap ...
imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5) PNM, (6) TGA, or (7) XPM file, related to "several heap and stack based buffer overflows - partly due to integer overflows."
References
Severity
10.0 Critical
Exploitation
3% chance of attack within 30 days
Timeline
Published6 Feb 2009
Updated30 Oct 2026
First seen20 Sep 2026
Sources
DEBIAN-CVE-2008-6079 · OSV
CVE-2008-6079 · NVD
Track software like this
Free during beta