Approved changes feed: RSS · Atom

cpe:2.3:a:enlightenment:imlib2:1.1.1:*:*:*:*:*:*:*

part: a version: 1.1.1 update: *

VendorEnlightenment (7edd52e2-564e-50f3-8a6f-04953404a5fd)
ProductImlib2 (413ef353-793b-5cc4-9e12-819225e9768b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/imlib2 purl2cpe 2026-06-01 10:14:51.422314
pkg:deb/ubuntu/imlib2 purl2cpe 2026-06-01 10:14:51.422315
pkg:github/0xd61/imlib2 purl2cpe 2026-06-01 10:14:51.422317
pkg:github/kkoudev/imlib2 purl2cpe 2026-06-01 10:14:51.422318
pkg:rpm/fedora/imlib2 purl2cpe 2026-06-01 10:14:51.422319
pkg:rpm/opensuse/imlib2 purl2cpe 2026-06-01 10:14:51.422321

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-6079 vulnerable 2026-06-08 04:50:53.991479 Details available
imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5) PNM, (6) TGA, or (7) XPM file, related to "several heap and stack based buffer overflows - partly due to integer overflows."
Published: 2009-02-06T11:00:00.000Z
Updated: 2024-08-07T11:20:24.663Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4809 vulnerable 2026-06-08 04:49:18.860746 Details available
Stack-based buffer overflow in loader_pnm.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNM image.
Published: 2006-11-07T00:00:00.000Z
Updated: 2024-08-07T19:23:41.124Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4808 vulnerable 2026-06-08 04:49:18.860116 Details available
Heap-based buffer overflow in loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TGA image.
Published: 2006-11-07T00:00:00.000Z
Updated: 2024-08-07T19:23:41.156Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4807 vulnerable 2026-06-08 04:49:18.859512 Details available
loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) via a crafted TGA image that triggers an out-of-bounds memory read, a different issue than CVE-2006-4808.
Published: 2006-11-07T00:00:00.000Z
Updated: 2024-08-07T19:23:41.170Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4806 vulnerable 2026-06-08 04:49:18.856515 Details available
Multiple integer overflows in imlib2 allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) ARGB (loader_argb.c), (2) PNG (loader_png.c), (3) LBM (loader_lbm.c), (4) JPEG (loader_jpeg.c), or (5) TIFF (loader_tiff.c) images.
Published: 2006-11-07T00:00:00.000Z
Updated: 2024-08-07T19:23:41.165Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0827 vulnerable 2026-06-08 04:47:51.549909 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0817 vulnerable 2026-06-08 04:47:51.420813 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0802 vulnerable 2026-06-08 04:47:51.325563 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.