ImLib BMP Image _LoadBMP Function Denial of Service Vulnerability

Bugtraq ID:	24750
Class:	Input Validation Error
CVE:	CVE-2007-3568
Remote:	Yes
Local:	No
Published:	Jul 03 2007 12:00AM
Updated:	May 07 2015 05:37PM
Credit:	beSTORM is credited with the discovery of this issue.
Vulnerable:	Imlib Imlib 1.9.15
Not Vulnerable:

ImLib BMP Image _LoadBMP Function Denial of Service Vulnerability

Imlib is prone to a denial-of-service vulnerability because the software fails to properly process certain BMP image files.

Remote attackers may exploit this issue by enticing victims into opening maliciously crafted BMP files.

An attacker could exploit this issue to cause denial-of-service conditions on applications using the affected library.

ImLib BMP Image _LoadBMP Function Denial of Service Vulnerability

To exploit this issue, an attacker must entice an unsuspecting user to view a specially crafted BMP image with an application that uses the affected library.

ImLib BMP Image _LoadBMP Function Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ImLib BMP Image _LoadBMP Function Denial of Service Vulnerability

References:

• Imlib Homepage (Imlib)