CVE-2006-4808

Description

Heap-based buffer overflow in loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TGA image.

How to fix CVE-2006-4808

To remediate CVE-2006-4808, upgrade the affected package to a fixed version below.

• Debian/imlib2—upgrade to 1.3.0.0debian1-3 or later

Is CVE-2006-4808 being exploited?

Low — EPSS is 4.6%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 1.3.0.0debian1-3

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2006-4808