CVE-2010-0991
published 2010-04-22CVE-2010-0991: Multiple heap-based buffer overflows in imlib2 1.4.3 allow context-dependent attackers to execute arbitrary code via a crafted (1) ARGB, (2) XPM, or (3) BMP…
PriorityP429medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
1.96%
78.0th percentile
Multiple heap-based buffer overflows in imlib2 1.4.3 allow context-dependent attackers to execute arbitrary code via a crafted (1) ARGB, (2) XPM, or (3) BMP file, related to the IMAGE_DIMENSIONS_OK macro in lib/image.h.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | imlib2 | — | — |
| enlightenment | imlib2 | — | — |
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
vendor_debian6.8LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fh2h-w7j5-5fpp: Multiple heap-based buffer overflows in imlib2 1
ghsa_unreviewed·2022-05-02
CVE-2010-0991 [MEDIUM] CWE-119 GHSA-fh2h-w7j5-5fpp: Multiple heap-based buffer overflows in imlib2 1
Multiple heap-based buffer overflows in imlib2 1.4.3 allow context-dependent attackers to execute arbitrary code via a crafted (1) ARGB, (2) XPM, or (3) BMP file, related to the IMAGE_DIMENSIONS_OK macro in lib/image.h.
Debian
CVE-2010-0991: imlib2 - Multiple heap-based buffer overflows in imlib2 1.4.3 allow context-dependent att...
vendor_debian·2010·CVSS 6.8
CVE-2010-0991 [MEDIUM] CVE-2010-0991: imlib2 - Multiple heap-based buffer overflows in imlib2 1.4.3 allow context-dependent att...
Multiple heap-based buffer overflows in imlib2 1.4.3 allow context-dependent attackers to execute arbitrary code via a crafted (1) ARGB, (2) XPM, or (3) BMP file, related to the IMAGE_DIMENSIONS_OK macro in lib/image.h.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
No detection rules found.
No public exploits indexed.
http://secunia.com/advisories/39354http://secunia.com/secunia_research/2010-54/http://www.securityfocus.com/archive/1/510866/100/0/threadedhttp://www.vupen.com/english/advisories/2010/0959http://secunia.com/advisories/39354http://secunia.com/secunia_research/2010-54/http://www.securityfocus.com/archive/1/510866/100/0/threadedhttp://www.vupen.com/english/advisories/2010/0959
2010-04-22
Published