CVE-2004-0817: Conectiva Linux

High severity, CVSS 7.5. EPSS: 4.9% chance of exploitation in the next 30 days.

Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.

Affected products

• Conectiva Linux: version 9.0 only; version 10.0 only
• Enlightenment Imlib: version 1.9 only; version 1.9.1 only; version 1.9.2 only; version 1.9.3 only; version 1.9.4 only; version 1.9.5 only; …
• Enlightenment IMLIB2: version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; version 1.0.5 only; …
• ImageMagick ImageMagick: version 5.3.3 only; version 5.4.3 only; version 5.4.4.5 only; version 5.4.7 only; version 5.4.8 only; version 5.4.8.2.1.1.0 only; …
• Mandrakesoft Mandrake Linux: version 9.2 only; version 10.0 only
• Mandrakesoft Mandrake Linux Corporate Server: version 2.1 only
• Red Hat Enterprise Linux: version 2.1 only; version 3.0 only
• Red Hat Enterprise Linux Desktop: version 3.0 only
• Red Hat Fedora Core: version core_1.0 only; version core_2.0 only; version core_3.0 only
• Red Hat Linux Advanced Workstation: version 2.1 only
• Sun Java Desktop System: version 2.0 only; version 2003 only
• Suse Suse Linux: version 8.0 only; version 8.1 only; version 8.2 only; version 9.0 only; version 9.1 only; version 9.2 only
• Turbolinux Turbolinux Desktop: version 10.0 only
• Turbolinux Turbolinux Server: version 7.0 only; version 8.0 only
• Turbolinux Turbolinux Workstation: version 7.0 only; version 8.0 only
• Ubuntu Ubuntu Linux: version 4.1 only

Published 2004-12-31. Last modified 2026-06-16.