FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-4809

This CVE name corresponds to:

Entered	Topic
2006-11-08	Imlib2 -- multiple image file processing vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2006-4809 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2006-4809
Phase	Assigned(20060915)

Description

Stack-based buffer overflow in loader_pnm.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNM image.

References

Source	Reference
MISC	http://www.discontinuity.info/~rowan/pocs/libimlib2_pocs-1.2.0-2.2.tar.gz
GENTOO	GLSA-200612-20
MANDRIVA	MDKSA-2006:198
MANDRIVA	MDKSA-2007:156
SUSE	SUSE-SR:2006:026
UBUNTU	USN-376-1
UBUNTU	USN-376-2
BID	20903
VUPEN	ADV-2006-4349
OSVDB	30104
SECUNIA	22732
SECUNIA	22744
SECUNIA	22752
SECUNIA	23441
SECUNIA	22932
XF	imlib2-loaderpnmc-bo(30070)