What’s Vulnerable › Vulnerabilities
CVE-2004-0817
- Severity: high (CVSS 7.5 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 4.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2004-12-31 · updated 2026-06-16
Description
Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.
Affected products
- Conectiva Linux: 9.0, 10.0
- Enlightenment Imlib: 1.9, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5 (+9)
- Enlightenment Imlib2: 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5 (+2)
- ImageMagick: 5.3.3, 5.4.3, 5.4.4.5, 5.4.7, 5.4.8, 5.4.8.2.1.1.0 (+4)
- Mandrakesoft Mandrake Linux: 9.2, 10.0
- Mandrakesoft Mandrake Linux Corporate Server: 2.1
- Red Hat Enterprise Linux: 2.1, 3.0
- RedHat Enterprise Linux Desktop: 3.0
- RedHat Fedora Core: core_1.0, core_2.0, core_3.0
- RedHat Linux Advanced Workstation: 2.1
- Sun Java Desktop System: 2.0, 2003
- Suse Linux: 8.0, 8.1, 8.2, 9.0, 9.1, 9.2
- Turbolinux Desktop: 10.0
- Turbolinux Server: 7.0, 8.0
- Turbolinux Workstation: 7.0, 8.0
- Ubuntu Linux: 4.1
References
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1
- http://www.debian.org/security/2004/dsa-548
- http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:089
- http://www.redhat.com/support/errata/RHSA-2004-465.html
- http://www.securityfocus.com/bid/11084
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17182
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8843
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1
- http://www.debian.org/security/2004/dsa-548
Get alerted when CVE-2004-0817 or the next vulnerability affects your stack