CVE-2004-0941: gd_graphics_library gdlib
Vulnerability summary
CVE-2004-0941 is a high (CVSS 10.0) vulnerability in gd_graphics_library gdlib. EPSS estimates a 10.69% chance of exploitation in the next 30 days, higher than 95.7% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 3Timeline
- 19-11-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
10.69%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 10.69% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Redhat4 products
- gd< 0:2.0.28-4.4E.1
- gd-debuginfo< 0:2.0.28-4.4E.1
- gd-devel< 0:2.0.28-4.4E.1
- gd-progs< 0:2.0.28-4.4E.1
Debian1 product
- libgd2< 2.0.33-1.1
Gd_graphics_library1 product
- gdlib1.8.4 | 2.0.1 | 2.0.20 | 2.0.21 | 2.0.22 | 2.0.23 | 2.0.26 | 2.0.27 | 2.0.28 | 2.0.33
Trustix1 product
- secure_linux1.5 | 2.0 | 2.1 | 2.2
4 vendors · 7 products
References
26 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11176VDB EntrySignatureX Refsource OVAL
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1195VDB EntrySignatureX Refsource OVAL
