CVE-2004-2698: Imwheel

Medium severity, CVSS 6.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Race condition in IMWheel 1.0.0pre11 and earlier, when running with the -k option, allows local users to cause a denial of service (IMWheel crash) and possibly modify arbitrary files via a symlink attack on the imwheel.pid file.

Affected products

• Imwheel Imwheel: up to and including 1.0.0pre11

Published 2004-12-31. Last modified 2026-06-16.