NetSight
IP …
critical10.0Public exploit code

CVE-2004-0990

Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly e…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.

Affected products

VendorProductAffected versions
Gd Graphics LibraryGdlib
Versions 1.8.4, 2.0.1, 2.0.15, 2.0.20, 2.0.21, 2.0.22
OpenpkgOpenpkg
Versions 2.1, 2.2, current
GentooLinux
All versions
SuseSuse Linux
Versions 8.0, 8.1, 8.2, 9.0, 9.1, 9.2
TrustixSecure Linux
Versions 1.5, 2.0, 2.1, 2.2

References