CVE-2004-0990
Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.
Published:Oct 26, 2004
Last Modified:Apr 16, 2026
EPS:Oct 28, 2004
EPSS Score:0.21209
CVSS Score:10
Affected Products
Vendor
Product
Action
Vendor
Gd Graphics Library
Product
Gdlib
Gd Graphics Library
Gdlib
Vendor
Gentoo
Product
Linux
Gentoo
Linux
Vendor
Openpkg
Product
Openpkg
Openpkg
Openpkg
Vendor
Redhat
Product
Enterprise Linux
Redhat
Enterprise Linux
Vendor
Suse
Product
Suse Linux
Suse
Suse Linux
Vendor
Trustix
Product
Secure Linux
Trustix
Secure Linux
Common Weakness Enumeration
No CWE recorded yet
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
