Published: 01/03/2005 Updated: 11/10/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote malicious users to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gd graphics library gdlib 1.8.4
gd graphics library gdlib 2.0.26
gd graphics library gdlib 2.0.27
gd graphics library gdlib 2.0.28
gd graphics library gdlib 2.0.1
gd graphics library gdlib 2.0.15
openpkg openpkg 2.1
openpkg openpkg 2.2
gd graphics library gdlib 2.0.20
gd graphics library gdlib 2.0.21
openpkg openpkg current
gd graphics library gdlib 2.0.22
gd graphics library gdlib 2.0.23
suse suse linux 8.1
suse suse linux 8.2
trustix secure linux 2.1
trustix secure linux 2.2
suse suse linux 9.0
suse suse linux 9.1
suse suse linux 9.2
gentoo linux
suse suse linux 8.0
trustix secure linux 1.5
trustix secure linux 2.0

Synopsis gd security update Type/Severity Security Advisory: Important Topic Updated gd packages that fix security issues with overflow in variousmemory allocation calls are now available[Updated 24 May 2005]Multilib packages have been added to this advisory Description The gd packages con ...

Several buffer overflows have been discovered in libgd’s PNG handling functions ...

"infamous41md" discovered several integer overflows in the PNG image decoding routines of the GD graphics library This could lead to the execution of arbitrary code on the victim's machine For the stable distribution (woody) these problems have been fixed in version 184-17woody3 of libgd1 and in version 201-10woody1 of libgd2 For the unstab ...

More potential integer overflows have been found in the GD graphics library which weren't covered by our security advisory DSA 591 They could be exploited by a specially crafted graphic and could lead to the execution of arbitrary code on the victim's machine For the stable distribution (woody) these problems have been fixed in version 201-10wo ...

More potential integer overflows have been found in the GD graphics library which weren't covered by our security advisory DSA 589 They could be exploited by a specially crafted graphic and could lead to the execution of arbitrary code on the victim's machine For the stable distribution (woody) these problems have been fixed in version 184-17w ...

#include <stdioh> #include <sys/typesh> #include <netinet/inh> #include <fcntlh> #include <stringh> #include <unistdh> #include <stdlibh> #include <stdinth> #include <zlibh> #define OUTFILE "britnay_spares_pr0npng" #define BS 0x1000 #define ALIGN 0 #define die(x) do{ perror((x)); exi ...

NVD-CWE-Other http://www.securityfocus.com/bid/11523 http://www.debian.org/security/2004/dsa-589 http://www.debian.org/security/2004/dsa-591 http://www.debian.org/security/2004/dsa-601 http://www.debian.org/security/2004/dsa-602 http://www.trustix.org/errata/2004/0058 http://www.osvdb.org/11190 http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html http://secunia.com/advisories/18717 http://secunia.com/advisories/20866 http://secunia.com/advisories/20824 http://secunia.com/advisories/21050 http://www.redhat.com/support/errata/RHSA-2004-638.html http://www.ciac.org/ciac/bulletins/p-071.shtml https://issues.rpath.com/browse/RPL-939 http://secunia.com/advisories/23783 http://www.mandriva.com/security/advisories?name=MDKSA-2004:132 http://www.mandriva.com/security/advisories?name=MDKSA-2006:113 http://www.mandriva.com/security/advisories?name=MDKSA-2006:114 http://www.mandriva.com/security/advisories?name=MDKSA-2006:122 http://marc.info/?l=bugtraq&m=109882489302099&w=2 https://www.ubuntu.com/usn/usn-25-1/https://www.ubuntu.com/usn/usn-11-1/https://exchange.xforce.ibmcloud.com/vulnerabilities/17866 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9952 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1260 https://access.redhat.com/errata/RHSA-2004:638 https://nvd.nist.gov https://usn.ubuntu.com/21-1/https://www.exploit-db.com/exploits/600/

CVE-2004-0990

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect