CVE-2004-1026: Enlightenment Imlib

High severity, CVSS 10.0. EPSS: 4.9% chance of exploitation in the next 30 days.

Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.

Affected products

• Enlightenment Imlib: version 1.9.13 only; version 1.9.14 only
• Gentoo Linux: any version
• Red Hat Linux: version 7.3 only; version 9.0 only

Published 2005-01-10. Last modified 2026-06-16.