{"id":"CVE-2008-6079","aliases":["DEBIAN-CVE-2008-6079","DSA-2029-1","EUVD-2008-6049","GHSA-7hrq-pg32-qp7r"],"status":"published","title":"imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a...","description":"imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5) PNM, (6) TGA, or (7) XPM file, related to \"several heap and stack based buffer overflows - partly due to integer overflows.\"","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02819,"percentile":0.86658,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2009-02-06T11:00:00Z","modified":"2026-10-23T17:47:42Z","fixes":[{"ecosystem":"Debian:12","package":"imlib2","fixed_in":["1.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imlib2","fixed_in":["1.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imlib2","fixed_in":["1.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:5.0","package":"imlib2","fixed_in":["1.4.0-1.2+lenny1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"imlib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imlib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imlib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:5.0","package":"imlib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-1.2+lenny1"}]}],"versions":["1.4.0-1.2"]}],"products":[{"vendor":"enlightenment","product":"imlib2"}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?release_id=634778","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.debian.org/security/2010/dsa-2029","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0803","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=576469","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46037","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/31880","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://secunia.com/advisories/32354","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/2898","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/39340","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-6079"},{"url":"https://github.com/advisories/GHSA-7hrq-pg32-qp7r"},{"url":"https://security-tracker.debian.org/tracker/CVE-2008-6079","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2008-6079","description":"imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5) PNM, (6) TGA, or (7) XPM file, related to \"several heap and stack based buffer overflows - partly due to integer overflows.\"","status":"published","published":"2009-02-06T11:00:00Z","modified":"2024-08-07T11:20:24.663Z","updated_at":"2026-11-02T14:34:46.587139Z"}],"euvd":[{"id":"EUVD-2008-6049","description":"imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5) PNM, (6) TGA, or (7) XPM file, related to \"several heap and stack based buffer overflows - partly due to integer overflows.\"","status":"published","published":"2009-02-06T11:00:00Z","modified":"2024-08-07T11:20:24Z","updated_at":"2026-11-03T01:38:37.840134Z"}],"ghsa":[{"id":"GHSA-7hrq-pg32-qp7r","title":"imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a...","description":"imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5) PNM, (6) TGA, or (7) XPM file, related to \"several heap and stack based buffer overflows - partly due to integer overflows.\"","status":"published","published":"2022-05-17T02:16:27Z","modified":"2023-01-27T05:03:39Z","updated_at":"2026-11-02T14:42:17.140708Z"}],"nvd":[{"id":"CVE-2008-6079","description":"imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5) PNM, (6) TGA, or (7) XPM file, related to \"several heap and stack based buffer overflows - partly due to integer overflows.\"","status":"published","published":"2009-02-06T11:30:00.36Z","modified":"2026-06-16T23:01:33.647Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:31.111729Z"}],"osv":[{"id":"CVE-2008-6079","description":"imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5) PNM, (6) TGA, or (7) XPM file, related to \"several heap and stack based buffer overflows - partly due to integer overflows.\"","status":"published","published":"2009-02-06T11:30:00Z","modified":"2026-04-10T03:40:28.299346Z","updated_at":"2026-11-02T15:43:57.452479Z"},{"id":"DEBIAN-CVE-2008-6079","description":"imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5) PNM, (6) TGA, or (7) XPM file, related to \"several heap and stack based buffer overflows - partly due to integer overflows.\"","status":"published","published":"2009-02-06T11:30:00.36Z","modified":"2026-10-23T17:47:42.202521039Z","updated_at":"2026-11-02T15:45:23.742363Z"},{"id":"DSA-2029-1","title":"imlib2 - arbitrary code execution","status":"published","published":"2010-04-05T00:00:00Z","modified":"2026-03-09T01:21:05.59276Z","updated_at":"2026-11-02T15:46:15.108335Z"}]}}