Lucene search

[email protected]CVE-2004-0990

HistoryMar 01, 2005 - 5:00 a.m.

CVE-2004-0990

2005-03-0105:00:00

[email protected]

web.nvd.nist.gov

cve-2004-0990

gd graphics library

libgd

integer overflow

remote attackers

denial of service

arbitrary code

png

image files

heap-based buffer overflow

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.217 Low

EPSS

Percentile

96.5%

JSON

Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.

Affected configurations

NVD

Node

gd_graphics_librarygdlibMatch1.8.4

gd_graphics_librarygdlibMatch2.0.1

gd_graphics_librarygdlibMatch2.0.15

gd_graphics_librarygdlibMatch2.0.20

gd_graphics_librarygdlibMatch2.0.21

gd_graphics_librarygdlibMatch2.0.22

gd_graphics_librarygdlibMatch2.0.23

gd_graphics_librarygdlibMatch2.0.26

gd_graphics_librarygdlibMatch2.0.27

gd_graphics_librarygdlibMatch2.0.28

openpkgopenpkgMatch2.1

openpkgopenpkgMatch2.2

openpkgopenpkgMatchcurrent

Node

gentoolinux

susesuse_linuxMatch8.0

susesuse_linuxMatch8.1

susesuse_linuxMatch8.2

susesuse_linuxMatch9.0

susesuse_linuxMatch9.0x86_64

susesuse_linuxMatch9.1

susesuse_linuxMatch9.2

trustixsecure_linuxMatch1.5

trustixsecure_linuxMatch2.0

trustixsecure_linuxMatch2.1

trustixsecure_linuxMatch2.2

CPENameOperatorVersion
gd_graphics_library:gdlibgd graphics library gdlibeq1.8.4
gd_graphics_library:gdlibgd graphics library gdlibeq2.0.1
gd_graphics_library:gdlibgd graphics library gdlibeq2.0.15
gd_graphics_library:gdlibgd graphics library gdlibeq2.0.20
gd_graphics_library:gdlibgd graphics library gdlibeq2.0.21
gd_graphics_library:gdlibgd graphics library gdlibeq2.0.22
gd_graphics_library:gdlibgd graphics library gdlibeq2.0.23
gd_graphics_library:gdlibgd graphics library gdlibeq2.0.26
gd_graphics_library:gdlibgd graphics library gdlibeq2.0.27
gd_graphics_library:gdlibgd graphics library gdlibeq2.0.28

CPE	Name	Operator	Version
gd_graphics_library:gdlib	gd graphics library gdlib	eq	1.8.4
gd_graphics_library:gdlib	gd graphics library gdlib	eq	2.0.1
gd_graphics_library:gdlib	gd graphics library gdlib	eq	2.0.15
gd_graphics_library:gdlib	gd graphics library gdlib	eq	2.0.20
gd_graphics_library:gdlib	gd graphics library gdlib	eq	2.0.21
gd_graphics_library:gdlib	gd graphics library gdlib	eq	2.0.22
gd_graphics_library:gdlib	gd graphics library gdlib	eq	2.0.23
gd_graphics_library:gdlib	gd graphics library gdlib	eq	2.0.26
gd_graphics_library:gdlib	gd graphics library gdlib	eq	2.0.27
gd_graphics_library:gdlib	gd graphics library gdlib	eq	2.0.28