CVE-2004-0990: Buffer Overflow
First published: Thu Oct 28 2004(Updated: )
Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Gd Graphics Library Gdlib | =2.0.26 | |
| Gd Graphics Library Gdlib | =2.0.15 | |
| Openpkg Openpkg | =2.1 | |
| Gd Graphics Library Gdlib | =2.0.22 | |
| Openpkg Openpkg | =current | |
| Gd Graphics Library Gdlib | =2.0.23 | |
| Gd Graphics Library Gdlib | =2.0.27 | |
| Gd Graphics Library Gdlib | =2.0.20 | |
| Gd Graphics Library Gdlib | =1.8.4 | |
| Openpkg Openpkg | =2.2 | |
| Gd Graphics Library Gdlib | =2.0.1 | |
| Gd Graphics Library Gdlib | =2.0.21 | |
| Gd Graphics Library Gdlib | =2.0.28 | |
| Trustix Secure Linux | =2.0 | |
| Suse Suse Linux | =9.2 | |
| Suse Suse Linux | =9.0 | |
| Suse Suse Linux | =8.2 | |
| Suse Suse Linux | =9.0 | |
| Suse Suse Linux | =8.0 | |
| Trustix Secure Linux | =1.5 | |
| Suse Suse Linux | =9.1 | |
| Trustix Secure Linux | =2.1 | |
| Trustix Secure Linux | =2.2 | |
| Gentoo Linux | ||
| Suse Suse Linux | =8.1 | |
| ubuntu/libgd | <1.8.4. | 1.8.4. |
| ubuntu/libgd | <1.8.4. | 1.8.4. |
| ubuntu/libgd | <1.8.4. | 1.8.4. |
| ubuntu/libgd2 | <2.0.33-2ubuntu5.2 | 2.0.33-2ubuntu5.2 |
| ubuntu/libgd2 | <2.0.33-4ubuntu2.1 | 2.0.33-4ubuntu2.1 |
| ubuntu/libgd2 | <2.0.34~ | 2.0.34~ |
| debian/libgd2 | 2.3.0-2 2.3.3-9 2.3.3-12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/11523
- http://www.debian.org/security/2004/dsa-589
- http://www.debian.org/security/2004/dsa-591
- http://www.debian.org/security/2004/dsa-601
- http://www.debian.org/security/2004/dsa-602
- http://www.trustix.org/errata/2004/0058
- http://www.osvdb.org/11190
- http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html
- http://secunia.com/advisories/18717
- http://secunia.com/advisories/20866
- http://secunia.com/advisories/20824
- http://secunia.com/advisories/21050
- http://www.redhat.com/support/errata/RHSA-2004-638.html
- http://www.ciac.org/ciac/bulletins/p-071.shtml
- https://issues.rpath.com/browse/RPL-939
- http://secunia.com/advisories/23783
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:132
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:113
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:114
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:122
- http://marc.info/?l=bugtraq&m=109882489302099&w=2
- https://www.ubuntu.com/usn/usn-25-1/
- https://www.ubuntu.com/usn/usn-11-1/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17866
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9952
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1260
- https://ubuntu.com/security/notices/USN-21-1
- https://ubuntu.com/security/notices/USN-11-1
- https://www.cve.org/CVERecord?id=CVE-2004-0990
- https://nvd.nist.gov/vuln/detail/CVE-2004-0990
- https://launchpad.net/bugs/cve/CVE-2004-0990
- https://security-tracker.debian.org/tracker/CVE-2004-0990
- https://ubuntu.com/security/CVE-2004-0990
- http://marc.info/?l=bugtraq&m=109882489302099&w=2
- collector/nvd-historical
- vendor/gd graphics library
- product/gdlib
- canonical/gd graphics library gdlib
- vendor/openpkg
- product/openpkg
- canonical/openpkg openpkg
- vendor/trustix
- product/secure linux
- canonical/trustix secure linux
- vendor/suse
- product/suse linux
- canonical/suse suse linux
- vendor/gentoo
- product/linux
- canonical/gentoo linux
- collector/nvd-index
- agent/type
- agent/last-modified-date
- collector/usn-cve
- source/Ubuntu
- agent/software-canonical-lookup
- agent/severity
- agent/remedy
- agent/weakness
- agent/first-publish-date
- agent/description
- collector/launchpad-cve
- source/Launchpad
- agent/author
- agent/references
- agent/tags
- collector/nvd-cve
- source/NVD
- agent/event
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- version/gd graphics library gdlib/2.0.26
- version/gd graphics library gdlib/2.0.15
- version/openpkg openpkg/2.1
- version/gd graphics library gdlib/2.0.22
- version/openpkg openpkg/current
- version/gd graphics library gdlib/2.0.23
- version/gd graphics library gdlib/2.0.27
- version/gd graphics library gdlib/2.0.20
- version/gd graphics library gdlib/1.8.4
- version/openpkg openpkg/2.2
- version/gd graphics library gdlib/2.0.1
- version/gd graphics library gdlib/2.0.21
- version/gd graphics library gdlib/2.0.28
- version/trustix secure linux/2.0
- version/suse suse linux/9.2
- version/suse suse linux/9.0
- version/suse suse linux/8.2
- version/suse suse linux/8.0
- version/trustix secure linux/1.5
- version/suse suse linux/9.1
- version/trustix secure linux/2.1
- version/trustix secure linux/2.2
- version/suse suse linux/8.1
- package-manager/ubuntu
- package-manager/debian