CVE-2004-0817

5 documents5 sources
Severity
7.5HIGH
EPSS
3.6%
top 12.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
16
Conectiva LinuxEnlightenment ImlibEnlightenment Imlib2+13 more
Timeline
PublishedDec 31
Latest updateApr 29

Description

Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages14 packages

▶NVDenlightenment/imlib15 versions+14
▶NVDenlightenment/imlib28 versions+7
▶NVDimagemagick/imagemagick10 versions+9
▶NVDconectiva/linux10.0, 9.0+1
▶NVDsuse/suse_linux6 versions+5

Also affects: Ubuntu Linux 4.1, Enterprise Linux 2.1, 3.0

Patches

Patch: distro.conectiva.com.br ↗Patch: www.debian.org ↗Patch: www.gentoo.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-q46h-4c8m-gg49: Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file↗2022-04-29
▶
CVEList
CVE-2004-0817: Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file↗2004-09-17
▶

📋Vendor Advisories

1
Red Hat
security flaw↗2004-08-25
▶

💬Community

1
Bugzilla
CVE-2004-0817 security flaw↗2018-08-16
▶