CVE-2004-0990

CVE-2004-0990 describes an integer overflow vulnerability in the GD Graphics Library (libgd2) version 2.0.28, and potentially other versions, affecting products like Gentoo and SUSE. This flaw allows remote attackers to trigger a heap-based buffer overflow by providing specially crafted PNG image files with large row values, leading to denial of service or potentially arbitrary code execution. With a CVSS score of 10.0, it represents a critical risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or Hot List, an ExploitDB entry for a local heap overflow exists, though there is no evidence of active exploitation or significant community discussion.