CVE-2004-0990
NONE EPSS 97.9%
Published Mar 1, 200521y ago · Modified Jun 16, 20262w ago
Published Mar 1, 2005 21y ago
Last Modified Jun 16, 2026 2w ago
Description
Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.
Threat Intelligence
EPSS Exploit Probability
97.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Affected Products 25
| Vendor | Product | Version | Range |
|---|---|---|---|
| gd_graphics_library | gdlib | 1.8.4 | any |
| gd_graphics_library | gdlib | 2.0.1 | any |
| gd_graphics_library | gdlib | 2.0.15 | any |
| gd_graphics_library | gdlib | 2.0.20 | any |
| gd_graphics_library | gdlib | 2.0.21 | any |
| gd_graphics_library | gdlib | 2.0.22 | any |
| gd_graphics_library | gdlib | 2.0.23 | any |
| gd_graphics_library | gdlib | 2.0.26 | any |
| gd_graphics_library | gdlib | 2.0.27 | any |
| gd_graphics_library | gdlib | 2.0.28 | any |
| openpkg | openpkg | 2.1 | any |
| openpkg | openpkg | 2.2 | any |
| openpkg | openpkg | current | any |
| gentoo | linux | * | any |
| suse | suse_linux | 8.0 | any |
| suse | suse_linux | 8.1 | any |
| suse | suse_linux | 8.2 | any |
| suse | suse_linux | 9.0 | any |
| suse | suse_linux | 9.0 | any |
| suse | suse_linux | 9.1 | any |
| suse | suse_linux | 9.2 | any |
| trustix | secure_linux | 1.5 | any |
| trustix | secure_linux | 2.0 | any |
| trustix | secure_linux | 2.1 | any |
| trustix | secure_linux | 2.2 | any |
References 26
- lists.suse.com http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html
- marc.info http://marc.info/?l=bugtraq&m=109882489302099&w=2
- secunia.com http://secunia.com/advisories/18717
- secunia.com http://secunia.com/advisories/20824
- secunia.com http://secunia.com/advisories/20866
- secunia.com http://secunia.com/advisories/21050
- secunia.com http://secunia.com/advisories/23783
- ciac.org http://www.ciac.org/ciac/bulletins/p-071.shtml
- debian.org http://www.debian.org/security/2004/dsa-589
- debian.org http://www.debian.org/security/2004/dsa-591
- debian.org http://www.debian.org/security/2004/dsa-601
- debian.org http://www.debian.org/security/2004/dsa-602
- mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2004:132
- mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2006:113
- mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2006:114
- mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2006:122
- osvdb.org http://www.osvdb.org/11190
- redhat.com http://www.redhat.com/support/errata/RHSA-2004-638.html
- securityfocus.com http://www.securityfocus.com/bid/11523
- trustix.org http://www.trustix.org/errata/2004/0058
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/17866
- issues.rpath.com https://issues.rpath.com/browse/RPL-939
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1260
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9952
- ubuntu.com https://www.ubuntu.com/usn/usn-11-1/
- ubuntu.com https://www.ubuntu.com/usn/usn-25-1/
Remediation
- securityfocus.com http://www.securityfocus.com/bid/11523