CVE Vulnerabilities

CVE-2004-0990

Published: Mar 01, 2005 | Modified: Oct 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.

Affected Software

Name Vendor Start Version End Version
Gdlib Gd_graphics_library 1.8.4 1.8.4
Gdlib Gd_graphics_library 2.0.1 2.0.1
Gdlib Gd_graphics_library 2.0.15 2.0.15
Gdlib Gd_graphics_library 2.0.20 2.0.20
Gdlib Gd_graphics_library 2.0.21 2.0.21
Gdlib Gd_graphics_library 2.0.22 2.0.22
Gdlib Gd_graphics_library 2.0.23 2.0.23
Gdlib Gd_graphics_library 2.0.26 2.0.26
Gdlib Gd_graphics_library 2.0.27 2.0.27
Gdlib Gd_graphics_library 2.0.28 2.0.28
Openpkg Openpkg 2.1 2.1
Openpkg Openpkg 2.2 2.2
Openpkg Openpkg current current
Red Hat Enterprise Linux 3 RedHat gd-0:1.8.4-12.3.1 *
Libgd Ubuntu dapper *
Libgd Ubuntu devel *
Libgd Ubuntu edgy *
Libgd Ubuntu feisty *
Libgd2 Ubuntu dapper *
Libgd2 Ubuntu devel *
Libgd2 Ubuntu edgy *
Libgd2 Ubuntu feisty *

References