CVE-2004-0817 Memory corruption in n/a

High 7.5 Published 17 Sep 2004 Updated 8 Aug 2024

Remote attackers can execute arbitrary code by tricking users into opening a crafted BMP file processed by the imlib library.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2004-0817?

CVE-2004-0817 is a high-severity memory corruption vulnerability in Conectiva Linux, published on 17 Sep 2004. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.

Which versions are affected by CVE-2004-0817?

It affects 16 products.

Linux distribution packages (12)

`imlib` Red Hat:enterprise_linux:3::as	All versions	`1:1.9.13-13.3`
`imlib-debuginfo` Red Hat:enterprise_linux:3::as	All versions	`1:1.9.13-13.3`
`imlib-devel` Red Hat:enterprise_linux:3::as	All versions	`1:1.9.13-13.3`
`imlib` Red Hat:enterprise_linux:3::desktop	All versions	`1:1.9.13-13.3`
`imlib-debuginfo` Red Hat:enterprise_linux:3::desktop	All versions	`1:1.9.13-13.3`
`imlib-devel` Red Hat:enterprise_linux:3::desktop	All versions	`1:1.9.13-13.3`
`imlib` Red Hat:enterprise_linux:3::es	All versions	`1:1.9.13-13.3`
`imlib-debuginfo` Red Hat:enterprise_linux:3::es	All versions	`1:1.9.13-13.3`
`imlib-devel` Red Hat:enterprise_linux:3::es	All versions	`1:1.9.13-13.3`
`imlib` Red Hat:enterprise_linux:3::ws	All versions	`1:1.9.13-13.3`
`imlib-debuginfo` Red Hat:enterprise_linux:3::ws	All versions	`1:1.9.13-13.3`
`imlib-devel` Red Hat:enterprise_linux:3::ws	All versions	`1:1.9.13-13.3`

Products include Conectiva Linux, Enlightenment Imlib, Enlightenment Imlib2, Imagemagick Imagemagick, Mandrakesoft Mandrake Linux, Mandrakesoft Mandrake Linux Corporate Server and 10 more.

How do I fix CVE-2004-0817?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2004-0817 being exploited?

There is no known exploitation of CVE-2004-0817 in the wild and no public exploit code.

All Conectiva Linux vulnerabilities

Sources

Also known as DSA-548-2, GHSA-q46h-4c8m-gg49, RHSA-2004:465.