Login Request a demo
Unscored severity · published Jan 10, 2005
CVE-2004-1026
Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of…
–
CVSS
4.9%
EPSS
No
On KEV
Description
Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.9% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Imlib · Enlightenment
1.9.13; 1.9.14 · source: NVD
LI
Linux · Redhat
7.3; 7.3; 7.3; 9.0 · source: NVD
Affected product
IM
Imlib
Enlightenment
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1026
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1026
www.debian.org
http://www.debian.org/security/2005/dsa-628
www.gentoo.org
http://www.gentoo.org/security/en/glsa/glsa-200412-03.xml
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDKSA-2005:007
Patch
http://www.redhat.com/support/errata/RHSA-2004-651.html
Vendor Advisory
http://www.securityfocus.com/bid/11830
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10771
More from Imlib
–
CVE-2004-1025
Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service…
–
CVE-2004-0802
Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than…
–
CVE-2004-0817
Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file
–
CVE-2004-0827
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and…
–
CVE-2002-0167
Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service (crash) and possibly execute arbitrary code…