Search

published date: March 1, 2005

CVE-2004-0990 : Denial of Service Vulnerability

Description

Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.

Product(s):

  • GD Graphics Library GDlib 1.8.4
  • GD Graphics Library GDlib 2.0.15
  • GD Graphics Library GDlib 2.0.1
  • GD Graphics Library GDlib 2.0.20
  • GD Graphics Library GDlib 2.0.21
  • GD Graphics Library GDlib 2.0.22

Question to Ask Vendors:

  1. Can you confirm whether your systems are affected by CVE-2004-0990, and if so, what steps are you currently taking to mitigate this vulnerability?
  2. What is your estimated timeline for fully resolving CVE-2004-0990 in your products or services, and how will you communicate updates on this issue to us as your customer?

READY TO GET RESULTS YOU CAN TRUST?