Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-0817
HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-0817

2004-12-3105:00:00
[email protected]
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.072 Low

EPSS

Percentile

94.0%

JSON

Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.

Affected configurations

NVD
Node
enlightenmentimlibMatch1.9
OR
enlightenmentimlibMatch1.9.1
OR
enlightenmentimlibMatch1.9.2
OR
enlightenmentimlibMatch1.9.3
OR
enlightenmentimlibMatch1.9.4
OR
enlightenmentimlibMatch1.9.5
OR
enlightenmentimlibMatch1.9.6
OR
enlightenmentimlibMatch1.9.7
OR
enlightenmentimlibMatch1.9.8
OR
enlightenmentimlibMatch1.9.9
OR
enlightenmentimlibMatch1.9.10
OR
enlightenmentimlibMatch1.9.11
OR
enlightenmentimlibMatch1.9.12
OR
enlightenmentimlibMatch1.9.13
OR
enlightenmentimlibMatch1.9.14
OR
enlightenmentimlib2Match1.0
OR
enlightenmentimlib2Match1.0.1
OR
enlightenmentimlib2Match1.0.2
OR
enlightenmentimlib2Match1.0.3
OR
enlightenmentimlib2Match1.0.4
OR
enlightenmentimlib2Match1.0.5
OR
enlightenmentimlib2Match1.1
OR
enlightenmentimlib2Match1.1.1
OR
imagemagickimagemagickMatch5.3.3
OR
imagemagickimagemagickMatch5.4.3
OR
imagemagickimagemagickMatch5.4.4.5
OR
imagemagickimagemagickMatch5.4.7
OR
imagemagickimagemagickMatch5.4.8
OR
imagemagickimagemagickMatch5.4.8.2.1.1.0
OR
imagemagickimagemagickMatch5.5.3.2.1.2.0
OR
imagemagickimagemagickMatch5.5.6.0_2003-04-09
OR
imagemagickimagemagickMatch5.5.7
OR
imagemagickimagemagickMatch6.0.2
OR
sunjava_desktop_systemMatch2.0
OR
sunjava_desktop_systemMatch2003
OR
conectivalinuxMatch9.0
OR
conectivalinuxMatch10.0
Node
mandrakesoftmandrake_linuxMatch9.2
OR
mandrakesoftmandrake_linuxMatch9.2amd64
OR
mandrakesoftmandrake_linuxMatch10.0
OR
mandrakesoftmandrake_linuxMatch10.0amd64
OR
mandrakesoftmandrake_linux_corporate_serverMatch2.1
OR
mandrakesoftmandrake_linux_corporate_serverMatch2.1x86_64
OR
redhatenterprise_linuxMatch2.1advanced_server
OR
redhatenterprise_linuxMatch2.1advanced_server_ia64
OR
redhatenterprise_linuxMatch2.1enterprise_server
OR
redhatenterprise_linuxMatch2.1enterprise_server_ia64
OR
redhatenterprise_linuxMatch2.1workstation
OR
redhatenterprise_linuxMatch2.1workstation_ia64
OR
redhatenterprise_linuxMatch3.0advanced_servers
OR
redhatenterprise_linuxMatch3.0enterprise_server
OR
redhatenterprise_linuxMatch3.0workstation
OR
redhatenterprise_linux_desktopMatch3.0
OR
redhatfedora_coreMatchcore_1.0
OR
redhatfedora_coreMatchcore_2.0
OR
redhatfedora_coreMatchcore_3.0
OR
redhatlinux_advanced_workstationMatch2.1ia64
OR
redhatlinux_advanced_workstationMatch2.1itanium_processor
OR
susesuse_linuxMatch8.0
OR
susesuse_linuxMatch8.0i386
OR
susesuse_linuxMatch8.1
OR
susesuse_linuxMatch8.2
OR
susesuse_linuxMatch9.0
OR
susesuse_linuxMatch9.0x86_64
OR
susesuse_linuxMatch9.1
OR
susesuse_linuxMatch9.2
OR
turbolinuxturbolinux_desktopMatch10.0
OR
turbolinuxturbolinux_serverMatch7.0
OR
turbolinuxturbolinux_serverMatch8.0
OR
turbolinuxturbolinux_workstationMatch7.0
OR
turbolinuxturbolinux_workstationMatch8.0
OR
ubuntuubuntu_linuxMatch4.1ia64
OR
ubuntuubuntu_linuxMatch4.1ppc

Related

nessus 10
openvas 12
cvelist 2
freebsd 1
redhat 1
cve 2
ubuntucve 1
debian 4
securityvulns 1
nvd 1
gentoo 1
debiancve 1
nessus
nessus
Fedora Core 1 : imlib-1.9.13-15.fc1 (2004-300)
2004-09-09 00:00:00
Fedora Core 2 : imlib-1.9.13-19 (2004-301)
2004-09-09 00:00:00
RHEL 2.1 / 3 : imlib (RHSA-2004:465)
2004-09-15 00:00:00
openvas
openvas
Debian Security Advisory DSA 548-2 (imlib)
2008-01-17 00:00:00
SLES9: Security update for imlib
2009-10-10 00:00:00
FreeBSD Ports: imlib
2008-09-04 00:00:00
cvelist
cvelist
CVE-2004-0817
2004-09-17 04:00:00
CVE-2004-0802
2004-09-24 04:00:00
freebsd
freebsd
imlib -- BMP decoder heap buffer overflow
2004-08-25 00:00:00
redhat
redhat
(RHSA-2004:465) imlib security update
2004-09-15 00:00:00
cve
cve
CVE-2004-0817
2004-12-31 05:00:00
CVE-2004-0802
2004-12-31 05:00:00
ubuntucve
ubuntucve
CVE-2004-0817
2004-12-31 00:00:00
debian
debian
[SECURITY] [DSA 548-2] New imlib packages fix arbitrary code execution
2005-10-26 04:38:33
[SECURITY] [DSA 548-1] New imlib packages fix arbitrary code execution
2004-09-16 12:48:02
[SECURITY] [DSA 548-1] New imlib packages fix arbitrary code execution
2004-09-16 12:48:02
securityvulns
securityvulns
[Full-Disclosure] MDKSA-2004:089 - Updated imlib/imlib2 packages fix BMP crash vulnerability
2004-09-08 00:00:00
nvd
nvd
CVE-2004-0802
2004-12-31 05:00:00
gentoo
gentoo
ImageMagick, imlib, imlib2: BMP decoding buffer overflows
2004-09-08 00:00:00
debiancve
debiancve
CVE-2004-0802
2004-12-31 05:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.072 Low

EPSS

Percentile

94.0%

JSON
Related for NVD:CVE-2004-0817
nessus10openvas12cvelist2freebsd1redhat1cve2ubuntucve1debian4securityvulns1nvd1gentoo1debiancve1