CVE-2004-0941 describes multiple buffer overflow vulnerabilities in versions of the gd graphics library (libgd) 2.0.21 and earlier, affecting various products including gdlib and Trustix Secure Linux. These flaws, distinct from CVE-2004-0990, stem from improper calls to gdMalloc when processing malformed image files. With a CVSS score of 10.0, this vulnerability is critical, allowing unauthenticated remote attackers to execute arbitrary code with complete confidentiality, integrity, and availability impact. Despite its high severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.8.4CPE matchmatch criteria | cpe:2.3:a:gd_graphics_library:gdlib:1.8.4:*:*:*:*:*:*:* | ||
2.0.1CPE matchmatch criteria | cpe:2.3:a:gd_graphics_library:gdlib:2.0.1:*:*:*:*:*:*:* | ||
2.0.20CPE matchmatch criteria | cpe:2.3:a:gd_graphics_library:gdlib:2.0.20:*:*:*:*:*:*:* | ||
2.0.21CPE matchmatch criteria | cpe:2.3:a:gd_graphics_library:gdlib:2.0.21:*:*:*:*:*:*:* | ||
2.0.22CPE matchmatch criteria | cpe:2.3:a:gd_graphics_library:gdlib:2.0.22:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.