Published: 31/12/2004 Updated: 11/07/2017

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

VMScore: 454

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Buffer overflow in the BMP loader in imlib2 prior to 1.1.2 allows remote malicious users to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.

Vulnerable Product	Search on Vulmon	Subscribe to Product
enlightenment imlib 1.9.10
enlightenment imlib 1.9.11
enlightenment imlib 1.9.6
enlightenment imlib 1.9.7
enlightenment imlib2 1.0.4
enlightenment imlib2 1.0.5
imagemagick imagemagick 5.4.8
imagemagick imagemagick 5.4.8.2.1.1.0
imagemagick imagemagick 5.5.3.2.1.2.0
conectiva linux 9.0
enlightenment imlib 1.9
enlightenment imlib 1.9.1
enlightenment imlib 1.9.4
enlightenment imlib 1.9.5
enlightenment imlib2 1.0.2
enlightenment imlib2 1.0.3
imagemagick imagemagick 5.4.4.5
imagemagick imagemagick 5.4.7
sun java desktop system 2003
conectiva linux 10.0
enlightenment imlib 1.9.2
enlightenment imlib 1.9.3
enlightenment imlib2 1.0
enlightenment imlib2 1.0.1
imagemagick imagemagick 5.3.3
imagemagick imagemagick 5.4.3
imagemagick imagemagick 6.0.2
sun java desktop system 2.0
enlightenment imlib 1.9.12
enlightenment imlib 1.9.13
enlightenment imlib 1.9.14
enlightenment imlib 1.9.8
enlightenment imlib 1.9.9
enlightenment imlib2 1.1
enlightenment imlib2 1.1.1
imagemagick imagemagick 5.5.6.0_2003-04-09
imagemagick imagemagick 5.5.7
redhat enterprise linux 2.1
redhat enterprise linux desktop 3.0
redhat fedora core core_1.0
suse suse linux 8.1
mandrakesoft mandrake linux corporate server 2.1
redhat enterprise linux 3.0
suse suse linux 8.0
turbolinux turbolinux desktop 10.0
turbolinux turbolinux server 7.0
mandrakesoft mandrake linux 9.2
redhat linux advanced workstation 2.1
suse suse linux 9.1
suse suse linux 9.2
ubuntu ubuntu linux 4.1
suse suse linux 8.2
turbolinux turbolinux server 8.0
turbolinux turbolinux workstation 7.0
mandrakesoft mandrake linux 10.0
redhat fedora core core_2.0
redhat fedora core core_3.0
suse suse linux 9.0
turbolinux turbolinux workstation 8.0

Marcus Meissner discovered a heap overflow error in imlib2, an imaging library for X and X11 and the successor of imlib, that may be utilised by an attacker to execute arbitrary code on the victims machine For the stable distribution (woody) this problem has been fixed in version 105-2woody1 For the unstable distribution (sid) this problem has ...

NVD-CWE-Other http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870 http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:089 http://www.vuxml.org/freebsd/ba005226-fb5b-11d8-9837-000c41e2cdad.html http://cvs.sourceforge.net/viewcvs.py/enlightenment/e17/libs/imlib2/ChangeLog?rev=1.20&view=markup http://www.securityfocus.com/bid/11084 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1 https://exchange.xforce.ibmcloud.com/vulnerabilities/17183 https://nvd.nist.gov https://www.debian.org/security/./dsa-552

CVE-2004-0802

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect