CVE-2004-0990
NoneCVSS
—
EPSS
28.3%
Published
Mar 1, 2005
CISA due date
—
The record
Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | libgd2 | 0 | 2.0.30-1 |
| Debian:12 | libgd2 | 0 | 2.0.30-1 |
| Debian:13 | libgd2 | 0 | 2.0.30-1 |
| Debian:3.0 | libgd | 0 | 1.8.4-17.woody3 |
| Debian:3.0 | libgd | 0 | 1.8.4-17.woody4 |
| Debian:3.0 | libgd2 | 0 | 2.0.1-10woody1 |
| Debian:3.0 | libgd2 | 0 | 2.0.1-10woody2 |
| Red Hat:enterprise_linux:3::as | gd | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::as | gd-debuginfo | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::as | gd-devel | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::as | gd-progs | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::desktop | gd | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::desktop | gd-debuginfo | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::desktop | gd-devel | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::desktop | gd-progs | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::es | gd | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::es | gd-debuginfo | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::es | gd-devel | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::es | gd-progs | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::ws | gd | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::ws | gd-debuginfo | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::ws | gd-devel | 0 | 0:1.8.4-12.3.1 |
| Red Hat:enterprise_linux:3::ws | gd-progs | 0 | 0:1.8.4-12.3.1 |
Related vulnerabilities
- CVE-2017-6362 Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows… Also affects libgd2
- CVE-2017-7890 The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics… Also affects libgd2
- CVE-2016-10166 Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD… Also affects libgd2
- CVE-2016-6911 The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows… Also affects libgd2
- CVE-2016-6132 The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3… Also affects libgd2
- CVE-2013-7456 gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP… Also affects libgd2
- CVE-2016-3074 Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote… Also affects libgd2
- CVE-2014-9709 The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before… Also affects libgd2