CVE-2006-4806

Published: Nov 7, 2006Modified: Apr 23, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Multiple integer overflows in imlib2 allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) ARGB (loader_argb.c), (2) PNG (loader_png.c), (3) LBM (loader_lbm.c), (4) JPEG (loader_jpeg.c), or (5) TIFF (loader_tiff.c) images.

Affected (12)

Products: Enlightenment: Imlib2

1 product

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Enlightenment Imlib2	Version 1.0.1
Enlightenment Imlib2	Version 1.0.2
Enlightenment Imlib2	Version 1.0.3
Enlightenment Imlib2	Version 1.0.4
Enlightenment Imlib2	Version 1.0.5
Enlightenment Imlib2	Version 1.0
Enlightenment Imlib2	Version 1.1.1
Enlightenment Imlib2	Version 1.1.2
Enlightenment Imlib2	Version 1.1
Enlightenment Imlib2	Version 1.2.1
Enlightenment Imlib2	Version 1.2.2
Enlightenment Imlib2	Version 1.3

References (40)

http://secunia.com/advisories/22732

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22744

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/22752

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/22932

Source: secalert@redhat.com

http://secunia.com/advisories/23441

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200612-20.xml

Source: secalert@redhat.com

http://www.discontinuity.info/~rowan/pocs/libimlib2_pocs-1.2.0-2.2.tar.gz

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:198

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:156

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_26_sr.html

Source: secalert@redhat.com

http://www.osvdb.org/30105

Source: secalert@redhat.com

http://www.osvdb.org/30106

Source: secalert@redhat.com

http://www.osvdb.org/30107

Source: secalert@redhat.com

http://www.osvdb.org/30108

Source: secalert@redhat.com

http://www.osvdb.org/30109

Source: secalert@redhat.com

http://www.securityfocus.com/bid/20903

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-376-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-376-2

Source: secalert@redhat.com

Patch

http://www.vupen.com/english/advisories/2006/4349

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/30064

Source: secalert@redhat.com

http://secunia.com/advisories/22732

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/22744

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/22752

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/22932

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/23441

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200612-20.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.discontinuity.info/~rowan/pocs/libimlib2_pocs-1.2.0-2.2.tar.gz

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:198

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2007:156

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2006_26_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/30105

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/30106

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/30107

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/30108

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/30109

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/20903

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-376-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-376-2

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.vupen.com/english/advisories/2006/4349

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/30064

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.