← Vulnerability feed

Vulnerability record · CVE-2004-0827 · published 16 September 2004

CVE-2004-0827: Enlightenment imlib vulnerability

Enlightenment · Imlib

Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.

7.5 CVSS 2.0 High EPSS 5.5% · top 7.5%
7.5CVSS 2.0 base score
5.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
14Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

14 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/28800
http://sunsolve.sun.com/search/document.do?assetkey=1-26-231321-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201006-1
http://www.debian.org/security/2004/dsa-547 PatchVendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-480.html PatchVendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-494.html PatchVendor Advisory
http://www.vupen.com/english/advisories/2008/0412
https://exchange.xforce.ibmcloud.com/vulnerabilities/17173
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11123
http://secunia.com/advisories/28800
http://sunsolve.sun.com/search/document.do?assetkey=1-26-231321-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201006-1
http://www.debian.org/security/2004/dsa-547 PatchVendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-480.html PatchVendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-494.html PatchVendor Advisory
http://www.vupen.com/english/advisories/2008/0412
https://exchange.xforce.ibmcloud.com/vulnerabilities/17173
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11123

Track CVE-2004-0827 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.4CVE-2016-3714ImageMagick coders allow command execution via crafted imageImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 fail to validate input in multiple coders (EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, PLT), allo…KEVEPSS 97%analysed5.5CVE-2016-3718ImageMagick HTTP/FTP coders allow server-side request forgery via crafted imageImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 mishandles the HTTP and FTP coders, letting a crafted image trigger server-side request forgery. A…KEVEPSS 77%analysed5.5CVE-2016-3715ImageMagick EPHEMERAL coder allows arbitrary file deletionThe EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 lets a crafted image cause deletion of arbitrary files. This is part of the…KEVEPSS 75%analysed10.0CVE-2008-6079Enlightenment imlib2 vulnerabilityimlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted (1) ARGB, (2) BMP, (3) JPEG, (4) LBM, (5) PNM, (6)…EPSS 2.8%10.0CVE-2005-3625Easy software products cups vulnerabilityXpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of servic…EPSS 3.8%10.0CVE-2004-0981Imagemagick vulnerabilityBuffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file.EPSS 5.8%10.0CVE-2004-0882Samba vulnerabilityBuffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT…EPSS 14%10.0CVE-2004-0902Mozilla vulnerabilityMultiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote att…EPSS 10%

Source: NIST National Vulnerability Database (record CVE-2004-0827), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.