CVE-2004-1026: Integer Overflow
Published Dec 10, 2004
·Updated
Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.
Affected Software
7 affected components
Enlightenment Imlib=1.9.13
Enlightenment Imlib=1.9.14
Gentoo Linux
redhat Linux=7.3
redhat Linux=7.3
redhat Linux=7.3
redhat Linux=9.0
Remediation
Patch Available
Event History
Dec 10, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1026?
CVE-2004-1026 is considered a critical vulnerability due to its potential to cause denial of service and execute arbitrary code.
2
How do I fix CVE-2004-1026?
To fix CVE-2004-1026, upgrade to a patched version of Imlib that addresses the integer overflow issues.
3
Which versions of Imlib are affected by CVE-2004-1026?
Imlib versions 1.9.13 and 1.9.14 are affected by CVE-2004-1026.
4
Can CVE-2004-1026 be exploited remotely?
Yes, CVE-2004-1026 can be exploited by remote attackers through specially crafted image files.
5
What software uses Imlib, making CVE-2004-1026 relevant?
CVE-2004-1026 is relevant for software that uses Imlib, such as gkrellm and various window managers.