VDB
CVE-2004-0941
CVE-2004-0941
PUBLISHED
CVSS 10 CRITICAL
Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990.
EPSS 10.69% · 95.8th percentile
Risk Scores
CVSS 2.0
10
EPSS Score
10.69%
95.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| gd_graphics_library | gdlib | 1.8.4, 2.0.20, 2.0.21 |
| trustix | secure_linux | 1.5, 2.1, 2.2 |
Timeline
- Nov 19, 2004 CVE Published
- Feb 4, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- Jul 18, 2023 EPSS Score
- Sep 9, 2023 EPSS Score
- Nov 1, 2023 EPSS Score
- Feb 15, 2024 EPSS Score
References
- P-071 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2004-0941 advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11176 url
- https://www.ubuntu.com/usn/usn-25-1 url
- https://www.ubuntu.com/usn/usn-33-1 url
- http://secunia.com/advisories/13179 url
- http://secunia.com/advisories/18686 url
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:113 url
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:114 url
- http://www.redhat.com/support/errata/RHSA-2004-638.html url
- http://secunia.com/advisories/21050 technical
- http://www.debian.org/security/2004/dsa-601 technical
- http://www.redhat.com/support/errata/RHSA-2006-0194.html technical
- http://www.securityfocus.com/bid/11663 patch
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1195 technical
- https://www.ubuntu.com/usn/usn-25-1/ technical
- http://secunia.com/advisories/13179/ technical
- http://secunia.com/advisories/20824 technical
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:122 technical
- http://www.trustix.org/errata/2004/0058 patch
…and 2 more