CVE-2004-1026

CVE-2004-1026 describes multiple integer overflow vulnerabilities within the imlib image handler, affecting versions 1.9.14 and earlier, which is integrated into products like gkrellm and various window managers on Linux distributions such as Enlightenment, Gentoo, and Red Hat. This critical vulnerability, with a CVSS score of 10.0, allows unauthenticated remote attackers to trigger a denial of service (application crash) and execute arbitrary code by supplying specially crafted image files. While there is no evidence of active exploitation, readily available exploit code, or inclusion in the KEV catalog, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.