CVE-2004-0981: Buffer Overflow
Published Nov 19, 2004
·Updated
Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file.
Affected Software
43 affected componentsFixes available
ubuntu/graphicsmagick<1.1.7-8
1.1.7-8
ubuntu/graphicsmagick<1.1.7-8
1.1.7-8
ubuntu/imagemagick<6.2.4.5-0.6ubuntu0.6
6.2.4.5-0.6ubuntu0.6
ubuntu/imagemagick<6.2.4.5.dfsg1-0.10ubuntu0.3
6.2.4.5.dfsg1-0.10ubuntu0.3
ubuntu/imagemagick<6.2.4.5.dfsg1-0.14ubuntu0.1
6.2.4.5.dfsg1-0.14ubuntu0.1
debian/graphicsmagick
1.4+really1.3.36+hg16481-2+deb11u11.4+really1.3.40-41.4+really1.3.43-1
debian/imagemagick
8:6.9.11.60+dfsg-1.3+deb11u38:6.9.11.60+dfsg-1.6+deb12u18:6.9.13.12+dfsg1-1
ImageMagick ImageMagick=5.3.3
ImageMagick ImageMagick=5.4.3
ImageMagick ImageMagick=5.4.4.5
ImageMagick ImageMagick=5.4.7
ImageMagick ImageMagick=5.4.8
ImageMagick ImageMagick=5.4.8.2.1.1.0
ImageMagick ImageMagick=5.5.3.2.1.2.0
ImageMagick ImageMagick=5.5.6.0_2003-04-09
ImageMagick ImageMagick=5.5.7
ImageMagick ImageMagick=6.0
ImageMagick ImageMagick=6.0.1
ImageMagick ImageMagick=6.0.3
ImageMagick ImageMagick=6.0.4
ImageMagick ImageMagick=6.0.5
ImageMagick ImageMagick=6.0.6
ImageMagick ImageMagick=6.0.7
ImageMagick ImageMagick=6.0.8
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Gentoo Linux
SUSE SuSE Linux=8.0
SUSE SuSE Linux=8.1
SUSE SuSE Linux=8.2
SUSE SuSE Linux=9.0
SUSE SuSE Linux=9.0
SUSE SuSE Linux=9.1
SUSE SuSE Linux=9.2
Event History
Nov 19, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Jun 13, 2024
Data Sourced
via Launchpad·04:22 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0981?
CVE-2004-0981 is considered to have a critical severity due to the potential for remote code execution.
2
How do I fix CVE-2004-0981?
To fix CVE-2004-0981, update ImageMagick to version 6.1.0 or later.
3
Which versions of ImageMagick are affected by CVE-2004-0981?
Versions of ImageMagick prior to 6.1.0 are affected by CVE-2004-0981.
4
What types of attacks can exploit CVE-2004-0981?
CVE-2004-0981 can be exploited via specially crafted image files that trigger a buffer overflow.
5
Is ImageMagick the only software affected by CVE-2004-0981?
No, GraphicsMagick is also affected by CVE-2004-0981 if using vulnerable versions.