CVE-2004-0802

2004-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

bmp loader

buffer overflow

remote code execution

imlib2

vulnerability

cve-2004-0802

nvd

7.4 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.058 Low

EPSS

Percentile

93.3%

JSON

Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.

CPENameOperatorVersion
enlightenment:imlibenlightenment imlibeq1.9.8
enlightenment:imlib2enlightenment imlib2eq1.1.1
enlightenment:imlibenlightenment imlibeq1.9.3
enlightenment:imlib2enlightenment imlib2eq1.0
imagemagick:imagemagickimagemagickeq5.4.3
conectiva:linuxconectiva linuxeq9.0
imagemagick:imagemagickimagemagickeq6.0.2
enlightenment:imlibenlightenment imlibeq1.9.13
imagemagick:imagemagickimagemagickeq5.4.8
enlightenment:imlibenlightenment imlibeq1.9.7

CPE	Name	Operator	Version
enlightenment:imlib	enlightenment imlib	eq	1.9.8
enlightenment:imlib2	enlightenment imlib2	eq	1.1.1
enlightenment:imlib	enlightenment imlib	eq	1.9.3
enlightenment:imlib2	enlightenment imlib2	eq	1.0
imagemagick:imagemagick	imagemagick	eq	5.4.3
conectiva:linux	conectiva linux	eq	9.0
imagemagick:imagemagick	imagemagick	eq	6.0.2
enlightenment:imlib	enlightenment imlib	eq	1.9.13
imagemagick:imagemagick	imagemagick	eq	5.4.8
enlightenment:imlib	enlightenment imlib	eq	1.9.7