CVE-2004-0827

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-09-16 · updated 2026-06-16

Description

Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.

Affected products

Conectiva Linux: 9.0, 10.0
Enlightenment Imlib: 1.9, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5 (+9)
Enlightenment Imlib2: 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5 (+2)
ImageMagick: 5.3.3, 5.4.3, 5.4.4.5, 5.4.7, 5.4.8, 5.4.8.2.1.1.0 (+4)
Mandrakesoft Mandrake Linux: 9.2, 10.0
Mandrakesoft Mandrake Linux Corporate Server: 2.1
Red Hat Enterprise Linux: 2.1, 3.0
RedHat Enterprise Linux Desktop: 3.0
RedHat Fedora Core: core_1.0, core_2.0, core_3.0
RedHat Linux Advanced Workstation: 2.1
Sun Java Desktop System: 2.0, 2003
Suse Linux: 8.0, 8.1, 8.2, 9.0, 9.1, 9.2
Turbolinux: desktop_10.0, server_7.0, server_8.0, workstation_7.0, workstation_8.0
Ubuntu Linux: 4.1

References

Get alerted when CVE-2004-0827 or the next vulnerability affects your stack