CVE-2004-0817
Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.
- Score
- CVSS 2.0 7.5 High
- Status
- Modified - cve@mitre.org
- Published
- 2004-12-31
- Last modified
- 2024-08-08
Affected products
- Linux (Conectiva)
- Imlib (Enlightenment)
- Imlib2 (Enlightenment)
- Imagemagick (Imagemagick)
- Mandrake Linux (Mandrakesoft)
- Mandrake Linux Corporate Server (Mandrakesoft)
- Enterprise Linux (Redhat)
- Enterprise Linux Desktop (Redhat)
- Fedora Core (Redhat)
- Linux Advanced Workstation (Redhat)
- Java Desktop System (Sun)
- Suse Linux (Suse)
- Turbolinux Desktop (Turbolinux)
- Turbolinux Server (Turbolinux)
- Turbolinux Workstation (Turbolinux)
- Ubuntu Linux (Ubuntu)
References
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1
- http://www.debian.org/security/2004/dsa-548
- http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:089
- http://www.redhat.com/support/errata/RHSA-2004-465.html
- http://www.securityfocus.com/bid/11084
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17182
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8843
