CVE-2004-0941

Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990.

Affected Software

Name	Vendor	Start Version	End Version
Gdlib	Gd_graphics_library	1.8.4 (including)	1.8.4 (including)
Gdlib	Gd_graphics_library	2.0.1 (including)	2.0.1 (including)
Gdlib	Gd_graphics_library	2.0.20 (including)	2.0.20 (including)
Gdlib	Gd_graphics_library	2.0.21 (including)	2.0.21 (including)
Gdlib	Gd_graphics_library	2.0.22 (including)	2.0.22 (including)
Gdlib	Gd_graphics_library	2.0.23 (including)	2.0.23 (including)
Gdlib	Gd_graphics_library	2.0.26 (including)	2.0.26 (including)
Gdlib	Gd_graphics_library	2.0.27 (including)	2.0.27 (including)
Gdlib	Gd_graphics_library	2.0.28 (including)	2.0.28 (including)
Gdlib	Gd_graphics_library	2.0.33 (including)	2.0.33 (including)
Red Hat Enterprise Linux 3	RedHat	gd-0:1.8.4-12.3.1	*
Red Hat Enterprise Linux 4	RedHat	gd-0:2.0.28-4.4E.1	*
Libgd	Ubuntu	dapper	*
Libgd	Ubuntu	devel	*
Libgd	Ubuntu	edgy	*
Libgd	Ubuntu	feisty	*
Libgd2	Ubuntu	dapper	*
Libgd2	Ubuntu	devel	*
Libgd2	Ubuntu	edgy	*
Libgd2	Ubuntu	feisty	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2004-0941
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References