CVE-2004-0941
Fixed in a distro release EPSS 11%
Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990.
Products: gd_graphics_library gdlib, trustix secure_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libgd2 | 2.0.33-1.1 |
| Debian 13 | libgd2 | 2.0.33-1.1 |
| Debian 14 | libgd2 | 2.0.33-1.1 |
| Debian 3.0 | libgd | 1.8.4-17.woody4 |
| Debian 3.0 | libgd2 | 2.0.1-10woody2 |
| Red Hat Enterprise Linux 3 | gd | 0:1.8.4-12.3.1 |
| Red Hat Enterprise Linux 3 | gd-debuginfo | 0:1.8.4-12.3.1 |
| Red Hat Enterprise Linux 3 | gd-devel | 0:1.8.4-12.3.1 |
| Red Hat Enterprise Linux 3 | gd-progs | 0:1.8.4-12.3.1 |
| Red Hat Enterprise Linux 4 | gd | 0:2.0.28-4.4E.1 |
| Red Hat Enterprise Linux 4 | gd-debuginfo | 0:2.0.28-4.4E.1 |
| Red Hat Enterprise Linux 4 | gd-devel | 0:2.0.28-4.4E.1 |
| Red Hat Enterprise Linux 4 | gd-progs | 0:2.0.28-4.4E.1 |