NVD

Id
71392  
Name
CVE-2004-0990  
Description
Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2005-03-01  
Modified Date
2017-07-10  
Seq
2004-0990  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
369083 71392 CVE-2004-0990 SUSE-SR:2006:003  View
369084 71392 CVE-2004-0990 20041026 libgd integer overflow  View
369085 71392 CVE-2004-0990 oval:org.mitre.oval:def:1260  View
369086 71392 CVE-2004-0990 oval:org.mitre.oval:def:9952  View
369087 71392 CVE-2004-0990 P-071  View
369088 71392 CVE-2004-0990 DSA-589  View
369089 71392 CVE-2004-0990 DSA-591  View
369090 71392 CVE-2004-0990 DSA-601  View
369091 71392 CVE-2004-0990 DSA-602  View
369092 71392 CVE-2004-0990 MDKSA-2004:132  View
369093 71392 CVE-2004-0990 MDKSA-2006:113  View
369094 71392 CVE-2004-0990 MDKSA-2006:114  View
369095 71392 CVE-2004-0990 MDKSA-2006:122  View
369096 71392 CVE-2004-0990 RHSA-2004:638  View
369097 71392 CVE-2004-0990 11523  View
369098 71392 CVE-2004-0990 2004-0058  View
369099 71392 CVE-2004-0990 gd-png-bo(17866)  View
369100 71392 CVE-2004-0990 https://issues.rpath.com/browse/RPL-939  View
369101 71392 CVE-2004-0990 USN-11-1  View
369102 71392 CVE-2004-0990 USN-25-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63121 JVNDB-2004-000463 GD ライブラリの不正な PNG ファイルの処理による整数オーバフローの脆弱性 GD ライブラリには、gd_png.c の gdImageCreateFromPngCtx() 関数において PNG ファイルの処理に不備が存在するため、意図的に作成された PNG ファイルを処理した場合に整数オーバーフローが発生する脆弱性が存在します。 CVE-2004-0990 9417 CVE-2004-0990 71392 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000463.html 2004-10-25 2007-04-01 View