Imlib
Vendor:
First CVE: Mar 25, 2002 · Active for 24 years
8
Total CVEs
More Total CVEs than 85% of tracked products
2.7
Avg CVEs / Year
Higher CVE frequency than 75% of tracked products
7.5
Avg CVSS
Higher Avg CVSS than 50% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Imlib over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 25, 2002
24 years ago
Most Recent CVE
Jan 10, 2005
7,866 days ago
CVE Severity & Scoring
Imlib8 CVEs
25%
75%
All CVEs352,427 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown8 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown8 (100.0%)
User Interaction
None0 (0.0%)
Unknown8 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown8 (100.0%)
Top CVEs
Signals from CVEs in this product scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2004-1025HIGH Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (applica | Jan 10, 2005 | 10.0 | 32 | NO | NO |
CVE-2004-1026HIGH Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of serv | Jan 10, 2005 | 10.0 | 32 | NO | NO |
CVE-2004-0827HIGH Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and | Sep 16, 2004 | 7.5 | 23 | NO | NO |
CVE-2004-0817HIGH Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file. | Dec 31, 2004 | 7.5 | 21 | NO | NO |
CVE-2002-0143MEDIUM Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment variable. | Mar 25, 2002 | 4.6 | 21 | NO | YES |
CVE-2004-0802MEDIUM Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-200 | Dec 31, 2004 | 5.1 | 20 | NO | NO |
CVE-2002-0167HIGH Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service (crash) and possibly execute arbitrary code v | Apr 22, 2002 | 7.5 | 20 | NO | NO |
CVE-2002-0168HIGH Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by manipulating arguments that are passed to malloc, | Apr 22, 2002 | 7.5 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (8 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
12.5% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (8 CVEs).
Media Mentions
Signals from CVEs in this product scope (8 CVEs).
Top CNAs Publishing CVEs For Imlib
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2.1.0.4 | 1 | 4.6 | 0.8% | 0 | 1 |
| 2.1.0.3 | 1 | 4.6 | 0.8% | 0 | 1 |
| 2.1.0.2 | 1 | 4.6 | 0.8% | 0 | 1 |
| 2.1.0.1 | 1 | 4.6 | 0.8% | 0 | 1 |
| 2.0.01.0.0 | 1 | 4.6 | 0.8% | 0 | 1 |
| 1.9.9 | 5 | 7.0 | 3.7% | 0 | 0 |
| 1.9.8 | 5 | 7.0 | 3.7% | 0 | 0 |
| 1.9.7 | 5 | 7.0 | 3.7% | 0 | 0 |
| 1.9.6 | 5 | 7.0 | 3.7% | 0 | 0 |
| 1.9.5 | 5 | 7.0 | 3.7% | 0 | 0 |
| 1.9.4 | 5 | 7.0 | 3.7% | 0 | 0 |
| 1.9.3 | 5 | 7.0 | 3.7% | 0 | 0 |
| 1.9.2 | 5 | 7.0 | 3.7% | 0 | 0 |
| 1.9.14 | 5 | 8.0 | 4.8% | 0 | 0 |
| 1.9.13 | 5 | 8.0 | 4.8% | 0 | 0 |
| 1.9.12 | 5 | 7.0 | 3.7% | 0 | 0 |
| 1.9.11 | 5 | 7.0 | 3.7% | 0 | 0 |
| 1.9.10 | 5 | 7.0 | 3.7% | 0 | 0 |
| 1.9.1 | 5 | 7.0 | 3.7% | 0 | 0 |
| 1.9 | 5 | 7.0 | 3.7% | 0 | 0 |