CVE-2008-5187 - CVE House
Back to Database
Status published High CVE-2008-5187

The load function in the XPM loader for imlib2 1.4.2,...

Vulnerability Description

The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XPM file that triggers a "pointer arithmetic error" and a heap-based buffer overflow, a different vulnerability than CVE-2008-2426.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-5187

Credits & Attribution

No credits recorded in the NVD database.

References

More from enlightenment

View All →
CVE-2022-37706
enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain...
Unknown 0
CVE-2020-12761
modules/loaders/loader_ico.c in imlib2 1.6.0 has an integer overflow (with resultant...
Critical 9.1
CVE-2018-20167
Terminology before 1.3.1 allows Remote Code Execution because popmedia is...
High 7.8
CVE-2016-4024
Integer overflow in imlib2 before 1.4.9 on 32-bit platforms allows...
Critical 9.8
CVE-2016-3993
Off-by-one error in the __imlib_MergeUpdate function in lib/updates.c in imlib2...
High 7.5

Affected Vendor

enlightenment

View all reports →

Affected Software

imlib2
Vulnerable Versions:
1.4.2

Timeline

Official Publish: November 21st, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.