Vulnerability in Enlightenment Imlib

CVE-2004-1025

Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.

EPSS: 0.052 (91.6th percentile) — read the EPSS interpretation.

Affected products

Enlightenment Imlib — versions 1.9.13, 1.9.14
Gentoo Linux
Redhat Linux — versions 7.3, 9.0
N/a — versions n/a

References

cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Patch, Vendor Advisory)
cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)