CVE-2004-0827: Conectiva Linux

High severity, CVSS 7.5. EPSS: 5.5% chance of exploitation in the next 30 days.

Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.

Affected products

• Conectiva Linux: version 9.0 only; version 10.0 only
• Enlightenment Imlib: version 1.9 only; version 1.9.1 only; version 1.9.2 only; version 1.9.3 only; version 1.9.4 only; version 1.9.5 only; …
• Enlightenment IMLIB2: version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; version 1.0.5 only; …
• ImageMagick ImageMagick: version 5.3.3 only; version 5.4.3 only; version 5.4.4.5 only; version 5.4.7 only; version 5.4.8 only; version 5.4.8.2.1.1.0 only; …
• Mandrakesoft Mandrake Linux: version 9.2 only; version 10.0 only
• Mandrakesoft Mandrake Linux Corporate Server: version 2.1 only
• Red Hat Enterprise Linux: version 2.1 only; version 3.0 only
• Red Hat Enterprise Linux Desktop: version 3.0 only
• Red Hat Fedora Core: version core_1.0 only; version core_2.0 only; version core_3.0 only
• Red Hat Linux Advanced Workstation: version 2.1 only
• Sun Java Desktop System: version 2.0 only; version 2003 only
• Suse Suse Linux: version 8.0 only; version 8.1 only; version 8.2 only; version 9.0 only; version 9.1 only; version 9.2 only
• Turbolinux Turbolinux: version desktop_10.0 only; version server_7.0 only; version server_8.0 only; version workstation_7.0 only; version workstation_8.0 only
• Ubuntu Ubuntu Linux: version 4.1 only

Published 2004-09-16. Last modified 2026-06-16.