CVE-2004-0802

Published: 31/12/2004 Updated: 11/07/2017

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

VMScore: 454

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Buffer overflow in the BMP loader in imlib2 prior to 1.1.2 allows remote malicious users to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.

Vulnerable Product	Search on Vulmon	Subscribe to Product
enlightenment imlib 1.9.8
enlightenment imlib2 1.1.1
enlightenment imlib 1.9.3
enlightenment imlib2 1.0
imagemagick imagemagick 5.4.3
conectiva linux 9.0
imagemagick imagemagick 6.0.2
enlightenment imlib 1.9.13
imagemagick imagemagick 5.4.8
enlightenment imlib 1.9.7
enlightenment imlib 1.9.1
enlightenment imlib2 1.0.5
imagemagick imagemagick 5.4.8.2.1.1.0
enlightenment imlib 1.9.10
enlightenment imlib 1.9.4
imagemagick imagemagick 5.5.3.2.1.2.0
imagemagick imagemagick 5.4.7
enlightenment imlib 1.9.2
sun java desktop system 2003
enlightenment imlib2 1.0.2
imagemagick imagemagick 5.4.4.5
enlightenment imlib 1.9.11
imagemagick imagemagick 5.5.6.0 2003-04-09
sun java desktop system 2.0
enlightenment imlib2 1.1
enlightenment imlib 1.9.12
enlightenment imlib 1.9.9
imagemagick imagemagick 5.3.3
enlightenment imlib2 1.0.3
enlightenment imlib2 1.0.4
enlightenment imlib 1.9.5
enlightenment imlib 1.9.6
conectiva linux 10.0
enlightenment imlib 1.9
enlightenment imlib 1.9.14
enlightenment imlib2 1.0.1
imagemagick imagemagick 5.5.7
redhat enterprise linux 2.1
redhat fedora core core 2.0
mandrakesoft mandrake linux corporate server 2.1
suse suse linux 9.2
redhat enterprise linux desktop 3.0
suse suse linux 9.0
ubuntu ubuntu linux 4.1
redhat linux advanced workstation 2.1
suse suse linux 8.2
redhat enterprise linux 3.0
mandrakesoft mandrake linux 9.2
turbolinux turbolinux server 7.0
redhat fedora core core 1.0
suse suse linux 8.0
turbolinux turbolinux workstation 7.0
suse suse linux 9.1
turbolinux turbolinux workstation 8.0
mandrakesoft mandrake linux 10.0
turbolinux turbolinux server 8.0
redhat fedora core core 3.0
turbolinux turbolinux desktop 10.0
suse suse linux 8.1

Marcus Meissner discovered a heap overflow error in imlib2, an imaging library for X and X11 and the successor of imlib, that may be utilised by an attacker to execute arbitrary code on the victims machine For the stable distribution (woody) this problem has been fixed in version 105-2woody1 For the unstable distribution (sid) this problem has ...

NVD-CWE-Other http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870 http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:089 http://www.vuxml.org/freebsd/ba005226-fb5b-11d8-9837-000c41e2cdad.html http://cvs.sourceforge.net/viewcvs.py/enlightenment/e17/libs/imlib2/ChangeLog?rev=1.20&view=markup http://www.securityfocus.com/bid/11084 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1 https://exchange.xforce.ibmcloud.com/vulnerabilities/17183 https://nvd.nist.gov https://www.debian.org/security/./dsa-552

CVE-2004-0802

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect