« Volver al listado

CVE-2007-3568

Estado: ModificadaMedia (5)—

The _LoadBMP function in imlib 1.9.15 and earlier allows context-dependent attackers to cause a denial of service (infinite loop) via a BMP image with a Bits Per Page (BPP) value of 0.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Imlib — Imlib

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-3568",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-07-05T19:30:00.000",
  "references": [
    {
      "url": "http://osvdb.org/39016",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securiteam.com/unixfocus/5WP030UM0W.html",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/24750",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1018332",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35325",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39016",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securiteam.com/unixfocus/5WP030UM0W.html",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/24750",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1018332",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35325",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The _LoadBMP function in imlib 1.9.15 and earlier allows context-dependent attackers to cause a denial of service (infinite loop) via a BMP image with a Bits Per Page (BPP) value of 0."
    },
    {
      "lang": "es",
      "value": "La función _LoadBMP en imlib 1.9.15 y anteriores permite a atacantes dependientes de contexto provocar una denegación de servicio (bucle infinito) mediante una imagen BMP con un valor BPP (Bits Por Página) de 0."
    }
  ],
  "lastModified": "2026-06-16T22:42:17.993",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:imlib:imlib:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A2B27E4-3A6C-4F92-98E3-86D79B9489A3",
              "versionEndIncluding": "1.9.15"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "vendorComments": [
    {
      "comment": "Mandriva does not consider bugs which result in a user-assisted crash of end user applications to be a security issue.\n",
      "lastModified": "2007-09-17T00:00:00",
      "organization": "Mandriva"
    },
    {
      "comment": "Red Hat does not consider bugs which result in  a user-assisted crash of end user application to be a security issue.",
      "lastModified": "2007-07-06T00:00:00",
      "organization": "Red Hat"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}