FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-4807

This CVE name corresponds to:

Entered Topic
2006-11-08 Imlib2 -- multiple image file processing vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2006-4807
Phase Assigned(20060915)

Description

loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) via a crafted TGA image that triggers an out-of-bounds memory read, a different issue than CVE-2006-4808.

References

Source Reference
MISC http://www.discontinuity.info/~rowan/pocs/libimlib2_pocs-1.2.0-2.2.tar.gz
GENTOO GLSA-200612-20
MANDRIVA MDKSA-2006:198
MANDRIVA MDKSA-2007:156
SUSE SUSE-SR:2006:026
UBUNTU USN-376-1
UBUNTU USN-376-2
BID 20903
VUPEN ADV-2006-4349
OSVDB 30102
SECUNIA 22732
SECUNIA 22744
SECUNIA 22752
SECUNIA 23441
SECUNIA 22932
XF imlib2-loadertgac-dos(30066)