CVE-2004-0941

Name	CVE-2004-0941
Description	Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-601-1, DSA-602-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
libgd2 (PTS)	jessie, jessie (lts)	2.1.0-5+deb8u15	fixed
	stretch (security)	2.2.4-2+deb9u4	fixed
	stretch (lts), stretch	2.2.4-2+deb9u6	fixed
	buster	2.2.5-5.2	fixed
	buster (security)	2.2.5-5.2+deb10u1	fixed
	bullseye	2.3.0-2	fixed
	sid, trixie, bookworm	2.3.3-9	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
libgd	source	woody	1.8.4-17.woody4		DSA-601-1
libgd	source	(unstable)	1.8.4-36.1
libgd2	source	woody	2.0.1-10woody2		DSA-602-1
libgd2	source	(unstable)	2.0.33-1.1