Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Enlightenment Subscribe
Total 29 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-9762 2 Debian, Enlightenment 2 Debian Linux, Imlib2 2017-06-30 5.0 MEDIUM 7.5 HIGH
imlib2 before 1.4.7 allows remote attackers to cause a denial of service (segmentation fault) via a GIF image without a colormap.
CVE-2016-3993 2 Debian, Enlightenment 2 Debian Linux, Imlib2 2016-11-30 5.0 MEDIUM 7.5 HIGH
Off-by-one error in the __imlib_MergeUpdate function in lib/updates.c in imlib2 before 1.4.9 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted coordinates.
CVE-2016-3994 2 Debian, Enlightenment 2 Debian Linux, Imlib2 2016-11-30 6.4 MEDIUM 8.2 HIGH
The GIF loader in imlib2 before 1.4.9 allows remote attackers to cause a denial of service (application crash) or obtain sensitive information via a crafted image, which triggers an out-of-bounds read.
CVE-2014-9771 2 Debian, Enlightenment 2 Debian Linux, Imlib2 2016-11-30 5.0 MEDIUM 7.5 HIGH
Integer overflow in imlib2 before 1.4.7 allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted image, which triggers an invalid read operation.
CVE-2011-5326 2 Debian, Enlightenment 2 Debian Linux, Imlib2 2016-11-30 5.0 MEDIUM 7.5 HIGH
imlib2 before 1.4.9 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) by drawing a 2x1 ellipse.
CVE-2008-5187 1 Enlightenment 1 Imlib2 2011-03-07 7.5 HIGH N/A
The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XPM file that triggers a "pointer arithmetic error" and a heap-based buffer overflow, a different vulnerability than CVE-2008-2426.
CVE-2002-0168 1 Enlightenment 1 Imlib 2008-09-10 7.5 HIGH N/A
Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by manipulating arguments that are passed to malloc, which results in a heap corruption.
CVE-2002-0167 1 Enlightenment 1 Imlib 2008-09-10 7.5 HIGH N/A
Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain weaknesses of NetPBM.
CVE-2002-0143 2 Enlightenment, Michael Jennings 2 Imlib, Eterm 2008-09-10 4.6 MEDIUM N/A
Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment variable.