CVE-2004-0802: Conectiva Linux

Medium severity, CVSS 5.1. EPSS: 3.4% chance of exploitation in the next 30 days.

Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.

Affected products

• Conectiva Linux: version 9.0 only; version 10.0 only
• Enlightenment Imlib: version 1.9 only; version 1.9.1 only; version 1.9.2 only; version 1.9.3 only; version 1.9.4 only; version 1.9.5 only; …
• Enlightenment IMLIB2: version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; version 1.0.5 only; …
• ImageMagick ImageMagick: version 5.3.3 only; version 5.4.3 only; version 5.4.4.5 only; version 5.4.7 only; version 5.4.8 only; version 5.4.8.2.1.1.0 only; …
• Mandrakesoft Mandrake Linux: version 9.2 only; version 10.0 only
• Mandrakesoft Mandrake Linux Corporate Server: version 2.1 only
• Red Hat Enterprise Linux: version 2.1 only; version 3.0 only
• Red Hat Enterprise Linux Desktop: version 3.0 only
• Red Hat Fedora Core: version core_1.0 only; version core_2.0 only; version core_3.0 only
• Red Hat Linux Advanced Workstation: version 2.1 only
• Sun Java Desktop System: version 2.0 only; version 2003 only
• Suse Suse Linux: version 8.0 only; version 8.1 only; version 8.2 only; version 9.0 only; version 9.1 only; version 9.2 only
• Turbolinux Turbolinux Desktop: version 10.0 only
• Turbolinux Turbolinux Server: version 7.0 only; version 8.0 only
• Turbolinux Turbolinux Workstation: version 7.0 only; version 8.0 only
• Ubuntu Ubuntu Linux: version 4.1 only

Published 2004-12-31. Last modified 2026-06-16.