CVE-2004-0941 Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to imprope...
HighCVSS 10.0
EPSS 10.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gd graphics library gdlib | = 1.8.4 | No fix listed |
| gd graphics library gdlib | = 2.0.1 | No fix listed |
| gd graphics library gdlib | = 2.0.20 | No fix listed |
| gd graphics library gdlib | = 2.0.21 | No fix listed |
| gd graphics library gdlib | = 2.0.22 | No fix listed |
| gd graphics library gdlib | = 2.0.23 | No fix listed |
| gd graphics library gdlib | = 2.0.26 | No fix listed |
| gd graphics library gdlib | = 2.0.27 | No fix listed |
| gd graphics library gdlib | = 2.0.28 | No fix listed |
| gd graphics library gdlib | = 2.0.33 | No fix listed |
| trustix secure linux | = 1.5 | No fix listed |
| trustix secure linux | = 2.0 | No fix listed |
| trustix secure linux | = 2.1 | No fix listed |
| trustix secure linux | = 2.2 | No fix listed |
| debian/libgd2(Debian:12) | < 2.0.33-1.1 | 2.0.33-1.1 |
| debian/libgd2(Debian:13) | < 2.0.33-1.1 | 2.0.33-1.1 |
| debian/libgd2(Debian:14) | < 2.0.33-1.1 | 2.0.33-1.1 |
References
- 13179 third-party-advisory
- 18686 third-party-advisory
- 20824 third-party-advisory
- 21050 third-party-advisory
- P-071 government-resource third-party-advisory
- DSA-601 vendor-advisory
- MDKSA-2006:113 vendor-advisory
- MDKSA-2006:114 vendor-advisory
- MDKSA-2006:122 vendor-advisory
- RHSA-2004:638 vendor-advisory
- RHSA-2006:0194 vendor-advisory
- 11663 patch vdb-entry vendor-advisory
- 2004-0058 patch vendor-advisory
- gd-graphics-gdmalloc-bo(18048) vdb-entry
- oval:org.mitre.oval:def:11176 signature vdb-entry
- oval:org.mitre.oval:def:1195 signature vdb-entry
- USN-25-1 vendor-advisory
- USN-33-1 vendor-advisory
- Debian Security Tracker CVE-2004-0941 vendor-advisory