What’s Vulnerable › Vulnerabilities
CVE-2004-0802
- Severity: medium (CVSS 5.1 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 3.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2004-12-31 · updated 2026-06-16
Description
Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.
Affected products
- Conectiva Linux: 9.0, 10.0
- Enlightenment Imlib: 1.9, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5 (+9)
- Enlightenment Imlib2: 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5 (+2)
- ImageMagick: 5.3.3, 5.4.3, 5.4.4.5, 5.4.7, 5.4.8, 5.4.8.2.1.1.0 (+4)
- Mandrakesoft Mandrake Linux: 9.2, 10.0
- Mandrakesoft Mandrake Linux Corporate Server: 2.1
- Red Hat Enterprise Linux: 2.1, 3.0
- RedHat Enterprise Linux Desktop: 3.0
- RedHat Fedora Core: core_1.0, core_2.0, core_3.0
- RedHat Linux Advanced Workstation: 2.1
- Sun Java Desktop System: 2.0, 2003
- Suse Linux: 8.0, 8.1, 8.2, 9.0, 9.1, 9.2
- Turbolinux Desktop: 10.0
- Turbolinux Server: 7.0, 8.0
- Turbolinux Workstation: 7.0, 8.0
- Ubuntu Linux: 4.1
References
- http://cvs.sourceforge.net/viewcvs.py/enlightenment/e17/libs/imlib2/ChangeLog?rev=1.20&view=markup
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1
- http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml
- http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:089
- http://www.securityfocus.com/bid/11084
- http://www.vuxml.org/freebsd/ba005226-fb5b-11d8-9837-000c41e2cdad.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17183
- http://cvs.sourceforge.net/viewcvs.py/enlightenment/e17/libs/imlib2/ChangeLog?rev=1.20&view=markup
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1
- http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml
Get alerted when CVE-2004-0802 or the next vulnerability affects your stack