CVE-2004-0802
published 2004-12-31CVE-2004-0802: Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different…
PriorityP428medium5.1CVSS 2.0
AVNACHAuNCPIPAP
EPSS
3.43%
87.6th percentile
Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.
Affected
64 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| conectiva | linux | — | — |
| conectiva | linux | — | — |
| debian | imlib2 | < imlib2 1.1.0-12.4 (bookworm) | imlib2 1.1.0-12.4 (bookworm) |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib2 | — | — |
| enlightenment | imlib2 | — | — |
| enlightenment | imlib2 | — | — |
| enlightenment | imlib2 | — | — |
| enlightenment | imlib2 | — | — |
| enlightenment | imlib2 | — | — |
| enlightenment | imlib2 | — | — |
CVSS provenance
nvdv2.05.1MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P
osv5.1MEDIUM
vendor_debian5.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-pv68-cmw6-5544: Buffer overflow in the BMP loader in imlib2 before 1
ghsa_unreviewed·2022-04-29·CVSS 7.5
CVE-2004-0802 [HIGH] GHSA-pv68-cmw6-5544: Buffer overflow in the BMP loader in imlib2 before 1
Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.
OSV
CVE-2004-0802: Buffer overflow in the BMP loader in imlib2 before 1
osv·2004-12-31·CVSS 5.1
CVE-2004-0802 [MEDIUM] CVE-2004-0802: Buffer overflow in the BMP loader in imlib2 before 1
Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.
Debian
CVE-2004-0802: imlib2 - Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers...
vendor_debian·2004·CVSS 5.1
CVE-2004-0802 [MEDIUM] CVE-2004-0802: imlib2 - Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers...
Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.
Scope: local
bookworm: resolved (fixed in 1.1.0-12.4)
bullseye: resolved (fixed in 1.1.0-12.4)
forky: resolved (fixed in 1.1.0-12.4)
sid: resolved (fixed in 1.1.0-12.4)
trixie: resolved (fixed in 1.1.0-12.4)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://cvs.sourceforge.net/viewcvs.py/enlightenment/e17/libs/imlib2/ChangeLog?rev=1.20&view=markuphttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1http://www.gentoo.org/security/en/glsa/glsa-200409-12.xmlhttp://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:089http://www.securityfocus.com/bid/11084http://www.vuxml.org/freebsd/ba005226-fb5b-11d8-9837-000c41e2cdad.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/17183http://cvs.sourceforge.net/viewcvs.py/enlightenment/e17/libs/imlib2/ChangeLog?rev=1.20&view=markuphttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1http://www.gentoo.org/security/en/glsa/glsa-200409-12.xmlhttp://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:089http://www.securityfocus.com/bid/11084http://www.vuxml.org/freebsd/ba005226-fb5b-11d8-9837-000c41e2cdad.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/17183
2004-12-31
Published