Candidate: CVE-2008-6079 PublicDate: 2009-02-06 11:30:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6079 Description: imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5) PNM, (6) TGA, or (7) XPM file, related to "several heap and stack based buffer overflows - partly due to integer overflows." Ubuntu-Description: Notes: kees> no details on the flaws yet. Bugs: Priority: low Discovered-by: Assigned-to: CVSS: Patches_imlib2: upstream_imlib2: released (1.4.2) dapper_imlib2: ignored (reached end-of-life) gutsy_imlib2: needed (reached end-of-life) hardy_imlib2: ignored (reached end-of-life) intrepid_imlib2: needed (reached end-of-life) jaunty_imlib2: not-affected (1.4.2-4ubuntu1) karmic_imlib2: not-affected (1.4.2-4ubuntu1) lucid_imlib2: not-affected (1.4.2-4ubuntu1) maverick_imlib2: not-affected (1.4.2-4ubuntu1) natty_imlib2: not-affected (1.4.2-4ubuntu1) devel_imlib2: not-affected (1.4.2-4ubuntu1)