CVE-2004-0827
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6...
CVE-2004-0827 is a high vulnerability (CVSS 7.5) in Imagemagick, published September 16, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.51%, the 92nd percentile. Fixed in imagemagick 5:6.0.7.1-1.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 5.51%EPSS, 92nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
5:6.0.7.1-1imagemagick +51 more
Description
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.
Exploit likelihood
Affected products
- imagemagick
- conectiva linux
- enlightenment imlib
- enlightenment imlib2
- mandrakesoft mandrake linux
- mandrakesoft mandrake linux corporate server
- redhat enterprise linux
- redhat enterprise linux desktop
- redhat fedora core
- redhat linux advanced workstation
- sun java desktop system
- suse linux
Show 2 moreShow less
Affected packages
| Package | Affected | Fixed |
|---|---|---|
imagemagickDebian:12 | before 5:6.0.7.1-1 | 5:6.0.7.1-1 |
imagemagickDebian:13 | before 5:6.0.7.1-1 | 5:6.0.7.1-1 |
imagemagickDebian:14 | before 5:6.0.7.1-1 | 5:6.0.7.1-1 |
imagemagickDebian:3.0 | before 5.4.4.5-1woody3 | 5.4.4.5-1woody3 |
ImageMagickRed Hat:enterprise_linux:3::as | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-c++Red Hat:enterprise_linux:3::as | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::as | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::as | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-develRed Hat:enterprise_linux:3::as | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-perlRed Hat:enterprise_linux:3::as | before 0:5.5.6-6 | 0:5.5.6-6 |
Show 42 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ImageMagickRed Hat:enterprise_linux:3::desktop | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-c++Red Hat:enterprise_linux:3::desktop | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::desktop | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::desktop | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-develRed Hat:enterprise_linux:3::desktop | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-perlRed Hat:enterprise_linux:3::desktop | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagickRed Hat:enterprise_linux:3::es | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-c++Red Hat:enterprise_linux:3::es | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::es | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::es | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-develRed Hat:enterprise_linux:3::es | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-perlRed Hat:enterprise_linux:3::es | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagickRed Hat:enterprise_linux:3::ws | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-c++Red Hat:enterprise_linux:3::ws | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::ws | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::ws | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-develRed Hat:enterprise_linux:3::ws | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagick-perlRed Hat:enterprise_linux:3::ws | before 0:5.5.6-6 | 0:5.5.6-6 |
ImageMagickRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-c++Red Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-develRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-perlRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagickRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-c++Red Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-develRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-perlRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagickRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-c++Red Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-develRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-perlRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagickRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-c++Red Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-develRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
ImageMagick-perlRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 0:5.5.6-7 | 0:5.5.6-7 |
What each source reports
NVD Score used
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.
- Record
CVE-2004-0827- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.
- Record
CVE-2004-0827- Updated
- 2026-11-02
EUVDEUVD-2004-0825No score
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.
- Record
EUVD-2004-0825- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vvxj-99jx-9x48No score
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6...
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.
- Record
GHSA-vvxj-99jx-9x48- Updated
- 2026-11-02
OSVNo score
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.
- Record
CVE-2004-0827- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0827No score
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.
- Record
DEBIAN-CVE-2004-0827- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11123
vupen.com/english/advisories/2008/0412
sunsolve.sun.com/search/document.do?assetkey=1-66-201006-1
debian.org/security/2004/dsa-547
redhat.com/support/errata/RHSA-2004-494.html
Show 21 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/17173
secunia.com/advisories/28800
nvd.nist.gov/vuln/detail/CVE-2004-0827
github.com/advisories/GHSA-vvxj-99jx-9x48
security-tracker.debian.org/tracker/CVE-2004-0827
access.redhat.com/errata/RHSA-2004:480
bugzilla.redhat.com/show_bug.cgi?id=130807
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_480.json
cve.org/CVERecord?id=CVE-2004-0827
bugs.debian.org/cgi-bin/bugreport.cgi?bug=278401