CVE-2004-0990

high · 10

Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.

CVSS

28.3%

EPSS (exploit prob.)

98th

EPSS percentile

2005-03-01

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
gd_graphics_library	gdlib	1.8.4
gd_graphics_library	gdlib	2.0.1
gd_graphics_library	gdlib	2.0.15
gd_graphics_library	gdlib	2.0.20
gd_graphics_library	gdlib	2.0.21
gd_graphics_library	gdlib	2.0.22
gd_graphics_library	gdlib	2.0.23
gd_graphics_library	gdlib	2.0.26
gd_graphics_library	gdlib	2.0.27
gd_graphics_library	gdlib	2.0.28
openpkg	openpkg	2.1
openpkg	openpkg	2.2
openpkg	openpkg	current
gentoo	linux	all versions
suse	suse_linux	8.0
suse	suse_linux	8.1
suse	suse_linux	8.2
suse	suse_linux	9.0
suse	suse_linux	9.0
suse	suse_linux	9.1
suse	suse_linux	9.2
trustix	secure_linux	1.5
trustix	secure_linux	2.0
trustix	secure_linux	2.1
trustix	secure_linux	2.2

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2004-0990