← Vulnerability feed

Vulnerability record · CVE-2004-0817 · published 31 December 2004

CVE-2004-0817: Enlightenment imlib vulnerability

Enlightenment · Imlib

Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.

7.5 CVSS 2.0 High EPSS 4.9% · top 8.3%
7.5CVSS 2.0 base score
4.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
16Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

16 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870 Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1
http://www.debian.org/security/2004/dsa-548 PatchVendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml PatchVendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:089
http://www.redhat.com/support/errata/RHSA-2004-465.html PatchVendor Advisory
http://www.securityfocus.com/bid/11084 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/17182
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8843
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870 Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1
http://www.debian.org/security/2004/dsa-548 PatchVendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml PatchVendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:089
http://www.redhat.com/support/errata/RHSA-2004-465.html PatchVendor Advisory
http://www.securityfocus.com/bid/11084 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/17182
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8843

Track CVE-2004-0817 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.4CVE-2016-3714ImageMagick coders allow command execution via crafted imageImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 fail to validate input in multiple coders (EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, PLT), allo…KEVEPSS 97%analysed5.5CVE-2016-3718ImageMagick HTTP/FTP coders allow server-side request forgery via crafted imageImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 mishandles the HTTP and FTP coders, letting a crafted image trigger server-side request forgery. A…KEVEPSS 77%analysed5.5CVE-2016-3715ImageMagick EPHEMERAL coder allows arbitrary file deletionThe EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 lets a crafted image cause deletion of arbitrary files. This is part of the…KEVEPSS 75%analysed10.0CVE-2008-6079Enlightenment imlib2 vulnerabilityimlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5) PNM, (6)…EPSS 2.8%10.0CVE-2005-3625Easy software products cups vulnerabilityXpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of servic…EPSS 3.8%10.0CVE-2004-0981Imagemagick vulnerabilityBuffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file.EPSS 5.8%10.0CVE-2004-0882Samba vulnerabilityBuffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT…EPSS 14%10.0CVE-2004-0902Mozilla vulnerabilityMultiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote att…EPSS 10%

Source: NIST National Vulnerability Database (record CVE-2004-0817), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.