CVE-2004-1026

Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by...

10.0 HighFix available

CVE-2004-1026 is a high vulnerability (CVSS 10.0) in Enlightenment Imlib, published December 10, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.93%, the 92nd percentile. Fixed in imlib2 1.1.2-2.1.

Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.

Exploit likelihood

4.93%Down 0.2 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Record: CVE-2004-1026
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Record: CVE-2004-1026
Updated: 2026-11-02

EUVDEUVD-2004-1024 No score

Record: EUVD-2004-1024
Updated: 2026-11-03

GitHub AdvisoriesGHSA-82jg-xfmw-x3pg No score

Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by...

Record: GHSA-82jg-xfmw-x3pg
Updated: 2026-11-02

OSV No score

Record: CVE-2004-1026
Updated: 2026-11-02

OSVDEBIAN-CVE-2004-1026 No score

Record: DEBIAN-CVE-2004-1026
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`imlib2` Debian:12	before 1.1.2-2.1	1.1.2-2.1
`imlib2` Debian:13	before 1.1.2-2.1	1.1.2-2.1
`imlib2` Debian:14	before 1.1.2-2.1	1.1.2-2.1
`imlib` Debian:3.0	before 1.9.14-2woody2	1.9.14-2woody2
`imlib2` Debian:3.0	before 1.0.5-2woody2, plus listed versions 1.0.5-2woody1	1.0.5-2woody2
`imlib` Red Hat:enterprise_linux:3::as	before 1:1.9.13-13.4	1:1.9.13-13.4
`imlib-debuginfo` Red Hat:enterprise_linux:3::as	before 1:1.9.13-13.4	1:1.9.13-13.4
`imlib-devel` Red Hat:enterprise_linux:3::as	before 1:1.9.13-13.4	1:1.9.13-13.4
`imlib` Red Hat:enterprise_linux:3::desktop	before 1:1.9.13-13.4	1:1.9.13-13.4
`imlib-debuginfo` Red Hat:enterprise_linux:3::desktop	before 1:1.9.13-13.4	1:1.9.13-13.4

Show 7 moreShow less

Affected packages
Package	Affected	Fixed
`imlib-devel` Red Hat:enterprise_linux:3::desktop	before 1:1.9.13-13.4	1:1.9.13-13.4
`imlib` Red Hat:enterprise_linux:3::es	before 1:1.9.13-13.4	1:1.9.13-13.4
`imlib-debuginfo` Red Hat:enterprise_linux:3::es	before 1:1.9.13-13.4	1:1.9.13-13.4
`imlib-devel` Red Hat:enterprise_linux:3::es	before 1:1.9.13-13.4	1:1.9.13-13.4
`imlib` Red Hat:enterprise_linux:3::ws	before 1:1.9.13-13.4	1:1.9.13-13.4
`imlib-debuginfo` Red Hat:enterprise_linux:3::ws	before 1:1.9.13-13.4	1:1.9.13-13.4
`imlib-devel` Red Hat:enterprise_linux:3::ws	before 1:1.9.13-13.4	1:1.9.13-13.4

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 14 moreShow less