10

CVE-2004-0941

Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gd Graphics Library ≫ Gdlib Version1.8.4
Gd Graphics Library ≫ Gdlib Version2.0.1
Gd Graphics Library ≫ Gdlib Version2.0.20
Gd Graphics Library ≫ Gdlib Version2.0.21
Gd Graphics Library ≫ Gdlib Version2.0.22
Gd Graphics Library ≫ Gdlib Version2.0.23
Gd Graphics Library ≫ Gdlib Version2.0.26
Gd Graphics Library ≫ Gdlib Version2.0.27
Gd Graphics Library ≫ Gdlib Version2.0.28
Gd Graphics Library ≫ Gdlib Version2.0.33
Trustix ≫ Secure Linux Version1.5
Trustix ≫ Secure Linux Version2.0
Trustix ≫ Secure Linux Version2.1
Trustix ≫ Secure Linux Version2.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 10.69% 0.952
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/13179/
http://secunia.com/advisories/18686
http://secunia.com/advisories/20824
http://secunia.com/advisories/21050
http://www.ciac.org/ciac/bulletins/p-071.shtml
http://www.debian.org/security/2004/dsa-601
http://www.mandriva.com/security/advisories?name=MDKSA-2006:113
http://www.mandriva.com/security/advisories?name=MDKSA-2006:114
http://www.mandriva.com/security/advisories?name=MDKSA-2006:122
http://www.redhat.com/support/errata/RHSA-2004-638.html
http://www.redhat.com/support/errata/RHSA-2006-0194.html
http://www.securityfocus.com/bid/11663
Patch
Vendor Advisory
http://www.trustix.org/errata/2004/0058
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18048
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11176
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1195
https://www.ubuntu.com/usn/usn-25-1/
https://www.ubuntu.com/usn/usn-33-1/