CVE-2004-0990 Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files...
HighCVSS 10.0
EPSS 28.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gd graphics library gdlib | = 1.8.4 | No fix listed |
| gd graphics library gdlib | = 2.0.1 | No fix listed |
| gd graphics library gdlib | = 2.0.15 | No fix listed |
| gd graphics library gdlib | = 2.0.20 | No fix listed |
| gd graphics library gdlib | = 2.0.21 | No fix listed |
| gd graphics library gdlib | = 2.0.22 | No fix listed |
| gd graphics library gdlib | = 2.0.23 | No fix listed |
| gd graphics library gdlib | = 2.0.26 | No fix listed |
| gd graphics library gdlib | = 2.0.27 | No fix listed |
| gd graphics library gdlib | = 2.0.28 | No fix listed |
| openpkg | = 2.1 | No fix listed |
| openpkg | = 2.2 | No fix listed |
| openpkg | = current | No fix listed |
| gentoo linux | All versions | No fix listed |
| suse linux | = 8.0 | No fix listed |
| suse linux | = 8.1 | No fix listed |
| suse linux | = 8.2 | No fix listed |
| suse linux | = 9.0 | No fix listed |
| suse linux | = 9.1 | No fix listed |
| suse linux | = 9.2 | No fix listed |
| trustix secure linux | = 1.5 | No fix listed |
| trustix secure linux | = 2.0 | No fix listed |
| trustix secure linux | = 2.1 | No fix listed |
| trustix secure linux | = 2.2 | No fix listed |
| debian/libgd2(Debian:12) | < 2.0.30-1 | 2.0.30-1 |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libgd2(Debian:13) | < 2.0.30-1 | 2.0.30-1 |
| debian/libgd2(Debian:14) | < 2.0.30-1 | 2.0.30-1 |
References
- Debian Security Tracker CVE-2004-0990 vendor-advisory
- SUSE-SR:2006:003 vendor-advisory
- 20041026 libgd integer overflow mailing-list
- 18717 third-party-advisory
- 20824 third-party-advisory
- 20866 third-party-advisory
- 21050 third-party-advisory
- 23783 third-party-advisory
- P-071 government-resource third-party-advisory
- DSA-589 vendor-advisory
- DSA-591 vendor-advisory
- DSA-601 vendor-advisory
- DSA-602 vendor-advisory
- MDKSA-2004:132 vendor-advisory
- MDKSA-2006:113 vendor-advisory
- MDKSA-2006:114 vendor-advisory
- MDKSA-2006:122 vendor-advisory
- 11190 vdb-entry
- RHSA-2004:638 vendor-advisory
- 11523 patch vdb-entry vendor-advisory
- 2004-0058 vendor-advisory
- gd-png-bo(17866) vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:1260 signature vdb-entry
- oval:org.mitre.oval:def:9952 signature vdb-entry
- USN-11-1 vendor-advisory
- USN-25-1 vendor-advisory