Unscored severity · published Feb 9, 2005
CVE-2004-0941
Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the…
–
CVSS
10.7%
EPSS
No
On KEV
Description
Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.7% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GD
Gdlib · GD Graphics Library
1.8.4; 2.0.1; 2.0.20; 2.0.21; 2.0.22; 2.0.23; +4 more · source: NVD
SL
Secure Linux · Trustix
1.5; 2.0; 2.1; 2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0941
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0941
secunia.com
http://secunia.com/advisories/13179/
secunia.com
http://secunia.com/advisories/18686
secunia.com
http://secunia.com/advisories/20824
secunia.com
http://secunia.com/advisories/21050
www.ciac.org
http://www.ciac.org/ciac/bulletins/p-071.shtml
www.debian.org
http://www.debian.org/security/2004/dsa-601
More from Gdlib
–
CVE-2007-3475
The GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via a GIF image that has no global color map
–
CVE-2007-3476
Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption)…
–
CVE-2007-3478
Race condition in gdImageStringFTEx (gdft_draw_bitmap) in gdft.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of…
–
CVE-2004-0990
Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary…