FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-4806

This CVE name corresponds to:

Entered	Topic
2006-11-08	Imlib2 -- multiple image file processing vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2006-4806 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2006-4806
Phase	Assigned(20060915)

Description

Multiple integer overflows in imlib2 allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) ARGB (loader_argb.c), (2) PNG (loader_png.c), (3) LBM (loader_lbm.c), (4) JPEG (loader_jpeg.c), or (5) TIFF (loader_tiff.c) images.

References

Source	Reference
MISC	http://www.discontinuity.info/~rowan/pocs/libimlib2_pocs-1.2.0-2.2.tar.gz
GENTOO	GLSA-200612-20
MANDRIVA	MDKSA-2006:198
MANDRIVA	MDKSA-2007:156
SUSE	SUSE-SR:2006:026
UBUNTU	USN-376-1
UBUNTU	USN-376-2
BID	20903
VUPEN	ADV-2006-4349
OSVDB	30105
OSVDB	30106
OSVDB	30107
OSVDB	30108
OSVDB	30109
SECUNIA	22732
SECUNIA	22744
SECUNIA	22752
SECUNIA	23441
SECUNIA	22932
XF	imlib2-load-overflow(30064)