CVE-2004-0817
published 2004-12-31CVE-2004-0817: Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.
PriorityP432high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
4.87%
91.1th percentile
Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.
Affected
64 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| conectiva | linux | — | — |
| conectiva | linux | — | — |
| debian | imlib2 | < imlib2 1.1.0-12.4 (bookworm) | imlib2 1.1.0-12.4 (bookworm) |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib | — | — |
| enlightenment | imlib2 | — | — |
| enlightenment | imlib2 | — | — |
| enlightenment | imlib2 | — | — |
| enlightenment | imlib2 | — | — |
| enlightenment | imlib2 | — | — |
| enlightenment | imlib2 | — | — |
| enlightenment | imlib2 | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv5.1MEDIUM
vendor_redhat7.5HIGH
vendor_debian5.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-pv68-cmw6-5544: Buffer overflow in the BMP loader in imlib2 before 1
ghsa_unreviewed·2022-04-29·CVSS 7.5
CVE-2004-0802 [HIGH] GHSA-pv68-cmw6-5544: Buffer overflow in the BMP loader in imlib2 before 1
Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.
GHSA
GHSA-q46h-4c8m-gg49: Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file
ghsa_unreviewed·2022-04-29
CVE-2004-0817 [HIGH] GHSA-q46h-4c8m-gg49: Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file
Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.
OSV
CVE-2004-0802: Buffer overflow in the BMP loader in imlib2 before 1
osv·2004-12-31·CVSS 5.1
CVE-2004-0802 [MEDIUM] CVE-2004-0802: Buffer overflow in the BMP loader in imlib2 before 1
Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.
Red Hat
security flaw
vendor_redhat·2004-08-25·CVSS 7.5
CVE-2004-0817 [HIGH] security flaw
security flaw
Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.
Debian
CVE-2004-0802: imlib2 - Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers...
vendor_debian·2004·CVSS 5.1
CVE-2004-0802 [MEDIUM] CVE-2004-0802: imlib2 - Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers...
Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.
Scope: local
bookworm: resolved (fixed in 1.1.0-12.4)
bullseye: resolved (fixed in 1.1.0-12.4)
forky: resolved (fixed in 1.1.0-12.4)
sid: resolved (fixed in 1.1.0-12.4)
trixie: resolved (fixed in 1.1.0-12.4)
No detection rules found.
No public exploits indexed.
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1http://www.debian.org/security/2004/dsa-548http://www.gentoo.org/security/en/glsa/glsa-200409-12.xmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2004:089http://www.redhat.com/support/errata/RHSA-2004-465.htmlhttp://www.securityfocus.com/bid/11084https://exchange.xforce.ibmcloud.com/vulnerabilities/17182https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8843http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1http://www.debian.org/security/2004/dsa-548http://www.gentoo.org/security/en/glsa/glsa-200409-12.xmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2004:089http://www.redhat.com/support/errata/RHSA-2004-465.htmlhttp://www.securityfocus.com/bid/11084https://exchange.xforce.ibmcloud.com/vulnerabilities/17182https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8843
2004-12-31
Published