CVE-2004-0827
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6...
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.
- Record
CVE-2004-0827- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.
- Record
CVE-2004-0827- Updated
- 2026-11-02
EUVDEUVD-2004-0825 No score
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.
- Record
EUVD-2004-0825- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vvxj-99jx-9x48 No score
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6...
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.
- Record
GHSA-vvxj-99jx-9x48- Updated
- 2026-11-02
OSV No score
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.
- Record
CVE-2004-0827- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0827 No score
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.
- Record
DEBIAN-CVE-2004-0827- Updated
- 2026-11-02
Affected products
- imagemagick
- conectiva linux
- enlightenment imlib
- enlightenment imlib2
- mandrakesoft mandrake linux
- mandrakesoft mandrake linux corporate server
- redhat enterprise linux
- redhat enterprise linux desktop
- redhat fedora core
- redhat linux advanced workstation
- sun java desktop system
- suse linux
Show 2 moreShow less
Affected packages
| Package | Affected | Fixed |
|---|---|---|
imagemagickDebian:12 |
before 5:6.0.7.1-1 | 5:6.0.7.1-1 |
imagemagickDebian:13 |
before 5:6.0.7.1-1 | 5:6.0.7.1-1 |
imagemagickDebian:14 |
before 5:6.0.7.1-1 | 5:6.0.7.1-1 |
imagemagickDebian:3.0 |
before 5.4.4.5-1woody3 | 5.4.4.5-1woody3 |
ImageMagickRed Hat:enterprise_linux:3::as |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-c++Red Hat:enterprise_linux:3::as |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::as |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::as |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-develRed Hat:enterprise_linux:3::as |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-perlRed Hat:enterprise_linux:3::as |
before 0:5.5.6-6 | 0:5.5.6-6 |
Show 42 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ImageMagickRed Hat:enterprise_linux:3::desktop |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-c++Red Hat:enterprise_linux:3::desktop |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::desktop |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-develRed Hat:enterprise_linux:3::desktop |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-perlRed Hat:enterprise_linux:3::desktop |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagickRed Hat:enterprise_linux:3::es |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-c++Red Hat:enterprise_linux:3::es |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::es |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::es |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-develRed Hat:enterprise_linux:3::es |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-perlRed Hat:enterprise_linux:3::es |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagickRed Hat:enterprise_linux:3::ws |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-c++Red Hat:enterprise_linux:3::ws |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::ws |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-develRed Hat:enterprise_linux:3::ws |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-perlRed Hat:enterprise_linux:3::ws |
before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagickRed Hat:enterprise_linux:3::as |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-c++Red Hat:enterprise_linux:3::as |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::as |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::as |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-develRed Hat:enterprise_linux:3::as |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-perlRed Hat:enterprise_linux:3::as |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagickRed Hat:enterprise_linux:3::desktop |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-c++Red Hat:enterprise_linux:3::desktop |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::desktop |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-develRed Hat:enterprise_linux:3::desktop |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-perlRed Hat:enterprise_linux:3::desktop |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagickRed Hat:enterprise_linux:3::es |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-c++Red Hat:enterprise_linux:3::es |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::es |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::es |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-develRed Hat:enterprise_linux:3::es |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-perlRed Hat:enterprise_linux:3::es |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagickRed Hat:enterprise_linux:3::ws |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-c++Red Hat:enterprise_linux:3::ws |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::ws |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-develRed Hat:enterprise_linux:3::ws |
before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-perlRed Hat:enterprise_linux:3::ws |
before 0:5.5.6-7 | 0:5.5.6-7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0827 is a high vulnerability (CVSS 7.5) in Imagemagick, published September 16, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.51%, the 92nd percentile. Fixed in imagemagick 5:6.0.7.1-1.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11123
vupen.com/english/advisories/2008/0412
sunsolve.sun.com/search/document.do?assetkey=1-66-201006-1
debian.org/security/2004/dsa-547
redhat.com/support/errata/RHSA-2004-494.html
Show 21 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/17173
secunia.com/advisories/28800
nvd.nist.gov/vuln/detail/CVE-2004-0827
github.com/advisories/GHSA-vvxj-99jx-9x48
security-tracker.debian.org/tracker/CVE-2004-0827
access.redhat.com/errata/RHSA-2004:480
bugzilla.redhat.com/show_bug.cgi?id=130807
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_480.json
cve.org/CVERecord?id=CVE-2004-0827
bugs.debian.org/cgi-bin/bugreport.cgi?bug=278401