peter bassill · operator
$ cve CVE-2004-0990 JSON

CVE-2004-0990 EXPLOIT

10.0
HIGH · CVSS 2.0 · EPSS 28.3% (pctl 98)

Patch early

A public exploit exists.

Description

Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.

Scoring

CVSS10.0 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS28.26% — more likely to be exploited than 98% of all CVEs
On CISA KEVno
Public exploityes
Published2005-03-01
Last modified2026-06-16

Affected (5)

VendorProduct
gd graphics librarygdlib
gentoolinux
openpkgopenpkg
susesuse linux
trustixsecure linux

Public exploits

SourceTitleDate
exploit-dbGD Graphics Library - Local Heap Overflow2004-10-26

References

→ the Explorer  ·  watch your stack  ·  NVD