CVE-2004-0990: gd_graphics_library gdlib
Vulnerability summary
CVE-2004-0990 is a high (CVSS 10.0) vulnerability in gd_graphics_library gdlib. EPSS estimates a 28.26% chance of exploitation in the next 30 days, higher than 98.1% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 3Timeline
- 28-10-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
28.26%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 28.26% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundGD Graphics Library - Local Heap Overflow
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian2 products
- libgd< 1.8.4-17.woody3
- libgd2< 2.0.30-1 | < 2.0.1-10woody1
Gd_graphics_library1 product
- gdlib1.8.4 | 2.0.1 | 2.0.15 | 2.0.20 | 2.0.21 | 2.0.22 | 2.0.23 | 2.0.26 | 2.0.27 | 2.0.28
Openpkg1 product
- openpkg2.1 | 2.2 | current
Suse1 product
- suse_linux8.0 | 8.1 | 8.2 | 9.0 | 9.1 | 9.2
Trustix1 product
- secure_linux1.5 | 2.0 | 2.1 | 2.2
5 vendors · 6 products
References
27 links
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1260VDB EntrySignatureX Refsource OVAL
Show all 27 references
- issues.rpath.com/browse/RPL-939X Refsource CONFIRM
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9952VDB EntrySignatureX Refsource OVAL