CVE-2004-0941
NoneCVSS
—
EPSS
10.7%
Published
Feb 9, 2005
CISA due date
—
The record
Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | libgd2 | 0 | 2.0.33-1.1 |
| Debian:12 | libgd2 | 0 | 2.0.33-1.1 |
| Debian:13 | libgd2 | 0 | 2.0.33-1.1 |
| Debian:3.0 | libgd | 0 | 1.8.4-17.woody4 |
| Debian:3.0 | libgd2 | 0 | 2.0.1-10woody2 |
| Red Hat:enterprise_linux:3::as | gd | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::as | gd-debuginfo | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::as | gd-devel | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::as | gd-progs | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::desktop | gd | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::desktop | gd-debuginfo | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::desktop | gd-devel | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::desktop | gd-progs | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::es | gd | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::es | gd-debuginfo | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::es | gd-devel | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::es | gd-progs | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::ws | gd | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::ws | gd-debuginfo | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::ws | gd-devel | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::ws | gd-progs | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:4::as | gd | 0 | 0:2.0.28-4.4E.1 |
| Red Hat:enterprise_linux:4::as | gd-debuginfo | 0 | 0:2.0.28-4.4E.1 |
| Red Hat:enterprise_linux:4::as | gd-devel | 0 | 0:2.0.28-4.4E.1 |
| Red Hat:enterprise_linux:4::as | gd-progs | 0 | 0:2.0.28-4.4E.1 |
| Red Hat:enterprise_linux:4::desktop | gd | 0 | 0:2.0.28-4.4E.1 |
| Red Hat:enterprise_linux:4::desktop | gd-debuginfo | 0 | 0:2.0.28-4.4E.1 |
| Red Hat:enterprise_linux:4::desktop | gd-devel | 0 | 0:2.0.28-4.4E.1 |
| Red Hat:enterprise_linux:4::desktop | gd-progs | 0 | 0:2.0.28-4.4E.1 |
| Red Hat:enterprise_linux:4::es | gd | 0 | 0:2.0.28-4.4E.1 |
| Red Hat:enterprise_linux:4::es | gd-debuginfo | 0 | 0:2.0.28-4.4E.1 |
| Red Hat:enterprise_linux:4::es | gd-devel | 0 | 0:2.0.28-4.4E.1 |
| Red Hat:enterprise_linux:4::es | gd-progs | 0 | 0:2.0.28-4.4E.1 |
| Red Hat:enterprise_linux:4::ws | gd | 0 | 0:2.0.28-4.4E.1 |
| Red Hat:enterprise_linux:4::ws | gd-debuginfo | 0 | 0:2.0.28-4.4E.1 |
| Red Hat:enterprise_linux:4::ws | gd-devel | 0 | 0:2.0.28-4.4E.1 |
| Red Hat:enterprise_linux:4::ws | gd-progs | 0 | 0:2.0.28-4.4E.1 |
Related vulnerabilities
- CVE-2017-6362 Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows… Also affects libgd2
- CVE-2017-7890 The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics… Also affects libgd2
- CVE-2016-10166 Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD… Also affects libgd2
- CVE-2016-6911 The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows… Also affects libgd2
- CVE-2016-6132 The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3… Also affects libgd2
- CVE-2013-7456 gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP… Also affects libgd2
- CVE-2016-3074 Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote… Also affects libgd2
- CVE-2014-9709 The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before… Also affects libgd2