CVE-2008-2426

Multiple stack-based buffer overflows in Imlib 2 (aka imlib2) 1.4.0 allow user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via (1) a PNM image with a crafted header, related to the load function in src/modules/loaders/loader_pnm.c; or (2) a crafted XPM image, related to the load function in src/modules/loader_xpm.c.

• CWE-119

• http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
• http://secunia.com/advisories/30401Vendor Advisory
• http://secunia.com/advisories/30485Vendor Advisory
• http://secunia.com/advisories/30572Vendor Advisory
• http://secunia.com/advisories/30727Vendor Advisory
• http://secunia.com/advisories/31982Vendor Advisory
• http://secunia.com/secunia_research/2008-25/advisory/Vendor Advisory
• http://securitytracker.com/id?1020146
• http://www.debian.org/security/2008/dsa-1594
• http://www.gentoo.org/security/en/glsa/glsa-200806-03.xml
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:123
• http://www.securityfocus.com/archive/1/492739/100/0/threaded
• http://www.securityfocus.com/bid/29417
• http://www.ubuntu.com/usn/USN-697-1
• http://www.vupen.com/english/advisories/2008/1700Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42732
• https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00030.html
• https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00052.html
• https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00113.html
• http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
• http://secunia.com/advisories/30401Vendor Advisory
• http://secunia.com/advisories/30485Vendor Advisory
• http://secunia.com/advisories/30572Vendor Advisory
• http://secunia.com/advisories/30727Vendor Advisory
• http://secunia.com/advisories/31982Vendor Advisory
• http://secunia.com/secunia_research/2008-25/advisory/Vendor Advisory
• http://securitytracker.com/id?1020146
• http://www.debian.org/security/2008/dsa-1594
• http://www.gentoo.org/security/en/glsa/glsa-200806-03.xml
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:123
• http://www.securityfocus.com/archive/1/492739/100/0/threaded
• http://www.securityfocus.com/bid/29417
• http://www.ubuntu.com/usn/USN-697-1
• http://www.vupen.com/english/advisories/2008/1700Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42732
• https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00030.html
• https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00052.html
• https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00113.html

Published

Jun 2, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-2420The OCSP functionality in stunnel before 4.24 does not prope…
• CVE-2008-2421Cross-site scripting (XSS) vulnerability in the Web GUI in S…
• CVE-2008-2422SQL injection vulnerability in index.php in Web Slider 0.6 a…
• CVE-2008-2423Unspecified vulnerability in Interchange before 5.6.0 and be…
• CVE-2008-2424Unspecified vulnerability in the 404 error page for the "Sta…
• CVE-2008-2425SQL injection vulnerability in index.php in FicHive 1.0 allo…
• CVE-2008-2427Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, …
• CVE-2008-2428Multiple SQL injection vulnerabilities in TorrentTrader 1.08…
• CVE-2008-2429Multiple SQL injection vulnerabilities in Calendarix Basic 0…
• CVE-2008-2430Integer overflow in the Open function in modules/demux/wav.c…
• CVE-2008-2431Multiple buffer overflows in Novell iPrint Client before 5.0…
• CVE-2008-2432Insecure method vulnerability in the GetFileList method in a…