CVEvulnerability

CVE-2004-0802

5.1 MEDIUM Published 2004-12-31 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2004-12-31
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P

Description

Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.

Affected configurations

• enlightenment imlib 1.9 • enlightenment imlib 1.9.1 • enlightenment imlib 1.9.2 • enlightenment imlib 1.9.3 • enlightenment imlib 1.9.4 • enlightenment imlib 1.9.5 • enlightenment imlib 1.9.6 • enlightenment imlib 1.9.7 • enlightenment imlib 1.9.8 • enlightenment imlib 1.9.9 • enlightenment imlib 1.9.10 • enlightenment imlib 1.9.11 • enlightenment imlib 1.9.12 • enlightenment imlib 1.9.13 • enlightenment imlib 1.9.14 • enlightenment imlib2 1.0 • enlightenment imlib2 1.0.1 • enlightenment imlib2 1.0.2 • enlightenment imlib2 1.0.3 • enlightenment imlib2 1.0.4 • enlightenment imlib2 1.0.5 • enlightenment imlib2 1.1 • enlightenment imlib2 1.1.1 • imagemagick imagemagick 5.3.3 • imagemagick imagemagick 5.4.3 • imagemagick imagemagick 5.4.4.5 • imagemagick imagemagick 5.4.7 • imagemagick imagemagick 5.4.8 • imagemagick imagemagick 5.4.8.2.1.1.0 • imagemagick imagemagick 5.5.3.2.1.2.0 • imagemagick imagemagick 5.5.6.0 2003-04-09 • imagemagick imagemagick 5.5.7 • imagemagick imagemagick 6.0.2 • sun java desktop system 2.0 • sun java desktop system 2003 • conectiva linux 9.0 • conectiva linux 10.0 • mandrakesoft mandrake linux 9.2 • mandrakesoft mandrake linux 10.0 • mandrakesoft mandrake linux corporate server 2.1 • redhat enterprise linux 2.1 • redhat enterprise linux 3.0 • redhat enterprise linux desktop 3.0 • redhat fedora core core 1.0 • redhat fedora core core 2.0 • redhat fedora core core 3.0 • redhat linux advanced workstation 2.1 • suse suse linux 8.0 • suse suse linux 8.1 • suse suse linux 8.2 • suse suse linux 9.0 • suse suse linux 9.1 • suse suse linux 9.2 • turbolinux turbolinux desktop 10.0 • turbolinux turbolinux server 7.0 • turbolinux turbolinux server 8.0 • turbolinux turbolinux workstation 7.0 • turbolinux turbolinux workstation 8.0 • ubuntu ubuntu linux 4.1

References

http://cvs.sourceforge.net/viewcvs.py/enlightenment/e17/libs/imlib2/ChangeLog?rev=1.20&view=markup cvs.sourceforge.net
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870 Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1 sunsolve.sun.com
http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml Patch, Vendor Advisory
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:089 www.mandrakesecure.net
http://www.securityfocus.com/bid/11084 Patch
http://www.vuxml.org/freebsd/ba005226-fb5b-11d8-9837-000c41e2cdad.html Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17183 exchange.xforce.ibmcloud.com
http://cvs.sourceforge.net/viewcvs.py/enlightenment/e17/libs/imlib2/ChangeLog?rev=1.20&view=markup cvs.sourceforge.net
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870 Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1 sunsolve.sun.com
http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml Patch, Vendor Advisory
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:089 www.mandrakesecure.net
http://www.securityfocus.com/bid/11084 Patch
http://www.vuxml.org/freebsd/ba005226-fb5b-11d8-9837-000c41e2cdad.html Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17183 exchange.xforce.ibmcloud.com