[email protected]CVE-2004-0941

HistoryFeb 09, 2005 - 5:00 a.m.

CVE-2004-0941

2005-02-0905:00:00

[email protected]

web.nvd.nist.gov

cve-2004-0941

buffer overflow

gd graphics library

libgd

remote code execution

image files

gdmalloc function

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.217 Low

EPSS

Percentile

96.5%

JSON

Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990.

Affected configurations

NVD

Node

gd_graphics_librarygdlibMatch1.8.4

gd_graphics_librarygdlibMatch2.0.1

gd_graphics_librarygdlibMatch2.0.20

gd_graphics_librarygdlibMatch2.0.21

gd_graphics_librarygdlibMatch2.0.22

gd_graphics_librarygdlibMatch2.0.23

gd_graphics_librarygdlibMatch2.0.26

gd_graphics_librarygdlibMatch2.0.27

gd_graphics_librarygdlibMatch2.0.28

gd_graphics_librarygdlibMatch2.0.33

Node

trustixsecure_linuxMatch1.5

trustixsecure_linuxMatch2.0

trustixsecure_linuxMatch2.1

trustixsecure_linuxMatch2.2

CPENameOperatorVersion
gd_graphics_library:gdlibgd graphics library gdlibeq1.8.4
gd_graphics_library:gdlibgd graphics library gdlibeq2.0.1
gd_graphics_library:gdlibgd graphics library gdlibeq2.0.20
gd_graphics_library:gdlibgd graphics library gdlibeq2.0.21
gd_graphics_library:gdlibgd graphics library gdlibeq2.0.22
gd_graphics_library:gdlibgd graphics library gdlibeq2.0.23
gd_graphics_library:gdlibgd graphics library gdlibeq2.0.26
gd_graphics_library:gdlibgd graphics library gdlibeq2.0.27
gd_graphics_library:gdlibgd graphics library gdlibeq2.0.28
gd_graphics_library:gdlibgd graphics library gdlibeq2.0.33

CPE	Name	Operator	Version
gd_graphics_library:gdlib	gd graphics library gdlib	eq	1.8.4
gd_graphics_library:gdlib	gd graphics library gdlib	eq	2.0.1
gd_graphics_library:gdlib	gd graphics library gdlib	eq	2.0.20
gd_graphics_library:gdlib	gd graphics library gdlib	eq	2.0.21
gd_graphics_library:gdlib	gd graphics library gdlib	eq	2.0.22
gd_graphics_library:gdlib	gd graphics library gdlib	eq	2.0.23
gd_graphics_library:gdlib	gd graphics library gdlib	eq	2.0.26
gd_graphics_library:gdlib	gd graphics library gdlib	eq	2.0.27
gd_graphics_library:gdlib	gd graphics library gdlib	eq	2.0.28
gd_graphics_library:gdlib	gd graphics library gdlib	eq	2.0.33