CVE-2004-0941

NONE EPSS 95.3%
Published Feb 9, 200521y ago · Modified Jun 16, 20262w ago
Find Similar
Published Feb 9, 2005 21y ago
Last Modified Jun 16, 2026 2w ago

Description

Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990.

Threat Intelligence

EPSS Exploit Probability
95.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 14

VendorProductVersionRange
gd_graphics_librarygdlib1.8.4any
gd_graphics_librarygdlib2.0.1any
gd_graphics_librarygdlib2.0.20any
gd_graphics_librarygdlib2.0.21any
gd_graphics_librarygdlib2.0.22any
gd_graphics_librarygdlib2.0.23any
gd_graphics_librarygdlib2.0.26any
gd_graphics_librarygdlib2.0.27any
gd_graphics_librarygdlib2.0.28any
gd_graphics_librarygdlib2.0.33any
trustixsecure_linux1.5any
trustixsecure_linux2.0any
trustixsecure_linux2.1any
trustixsecure_linux2.2any

References 18

  • secunia.com http://secunia.com/advisories/13179/
  • secunia.com http://secunia.com/advisories/18686
  • secunia.com http://secunia.com/advisories/20824
  • secunia.com http://secunia.com/advisories/21050
  • ciac.org http://www.ciac.org/ciac/bulletins/p-071.shtml
  • debian.org http://www.debian.org/security/2004/dsa-601
  • mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2006:113
  • mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2006:114
  • mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2006:122
  • redhat.com http://www.redhat.com/support/errata/RHSA-2004-638.html
  • redhat.com http://www.redhat.com/support/errata/RHSA-2006-0194.html
  • securityfocus.com http://www.securityfocus.com/bid/11663
    PatchVendor Advisory
  • trustix.org http://www.trustix.org/errata/2004/0058
    PatchVendor Advisory
  • exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/18048
  • oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11176
  • oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1195
  • ubuntu.com https://www.ubuntu.com/usn/usn-25-1/
  • ubuntu.com https://www.ubuntu.com/usn/usn-33-1/

Remediation

  • securityfocus.com http://www.securityfocus.com/bid/11663
    PatchVendor Advisory
  • trustix.org http://www.trustix.org/errata/2004/0058
    PatchVendor Advisory