CVE-2004-0817 [High] | Memory Corruption in Imlib

CVE-2004-0817 is rated Moderate Risk (60.7/100): CVSS High severity, with medium exploitation likelihood (EPSS 3.60%). Review affected assets and schedule remediation.

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2025-12-23	3.44%	3.60%	+0.15%
2	2025-12-10	3.60%	3.44%	-0.15%
3	2025-11-05	—	3.60%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2025-12-23

3.44%

3.60%

+0.15%

2025-12-10

3.60%

3.44%

-0.15%

2025-11-05

—

3.60%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
7.5	2.0	HIGH	`AV:N/AC:L/Au:N/C:P/I:P/A:P` Click to expand Access vector (AV:N) Can be exploited remotely over network reachability. Access complexity (AC:L) Exploitation conditions are straightforward and predictable. Authentication (AU:N) No authentication is required. Confidentiality impact (C:P) Partial confidentiality impact. Integrity impact (I:P) Partial integrity impact. Availability impact (A:P) Partial availability impact.	10.0	6.4	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

7.5

2.0

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P Click to expand

Access vector (AV:N): Can be exploited remotely over network reachability.
Access complexity (AC:L): Exploitation conditions are straightforward and predictable.
Authentication (AU:N): No authentication is required.
Confidentiality impact (C:P): Partial confidentiality impact.
Integrity impact (I:P): Partial integrity impact.
Availability impact (A:P): Partial availability impact.

10.0

6.4

[email protected]

OS Trackers for CVE-2004-0817

vendor	priority	summary	link
`redhat`	high	—	https://access.redhat.com/security/cve/CVE-2004-0817
`suse`	medium	—	https://www.suse.com/security/cve/CVE-2004-0817/
`ubuntu`	medium	CVE-2004-0817 medium priority: Ubuntu including 2 source packages (imlib, imlib2), 8 status rows across 4 suites (dapper, edgy, feisty, upstream): released 6, needs-triage 2.	https://ubuntu.com/security/CVE-2004-0817

vendor

priority

summary

link

redhat

high

—

https://access.redhat.com/security/cve/CVE-2004-0817

suse

medium

—

https://www.suse.com/security/cve/CVE-2004-0817/

ubuntu

medium

CVE-2004-0817 medium priority: Ubuntu including 2 source packages (imlib, imlib2), 8 status rows across 4 suites (dapper, edgy, feisty, upstream): released 6, needs-triage 2.

https://ubuntu.com/security/CVE-2004-0817

Affected software / configurations for CVE-2004-0817

Vendor	Product	Version	Raw CPE
enlightenment	imlib	1.9	cpe:2.3:a:enlightenment:imlib:1.9:::::::*
enlightenment	imlib	1.9.1	cpe:2.3:a:enlightenment:imlib:1.9.1:::::::*
enlightenment	imlib	1.9.2	cpe:2.3:a:enlightenment:imlib:1.9.2:::::::*
enlightenment	imlib	1.9.3	cpe:2.3:a:enlightenment:imlib:1.9.3:::::::*
enlightenment	imlib	1.9.4	cpe:2.3:a:enlightenment:imlib:1.9.4:::::::*
enlightenment	imlib	1.9.5	cpe:2.3:a:enlightenment:imlib:1.9.5:::::::*
enlightenment	imlib	1.9.6	cpe:2.3:a:enlightenment:imlib:1.9.6:::::::*
enlightenment	imlib	1.9.7	cpe:2.3:a:enlightenment:imlib:1.9.7:::::::*
enlightenment	imlib	1.9.8	cpe:2.3:a:enlightenment:imlib:1.9.8:::::::*
enlightenment	imlib	1.9.9	cpe:2.3:a:enlightenment:imlib:1.9.9:::::::*
enlightenment	imlib	1.9.10	cpe:2.3:a:enlightenment:imlib:1.9.10:::::::*
enlightenment	imlib	1.9.11	cpe:2.3:a:enlightenment:imlib:1.9.11:::::::*
enlightenment	imlib	1.9.12	cpe:2.3:a:enlightenment:imlib:1.9.12:::::::*
enlightenment	imlib	1.9.13	cpe:2.3:a:enlightenment:imlib:1.9.13:::::::*
enlightenment	imlib	1.9.14	cpe:2.3:a:enlightenment:imlib:1.9.14:::::::*
enlightenment	imlib2	1.0	cpe:2.3:a:enlightenment:imlib2:1.0:::::::*
enlightenment	imlib2	1.0.1	cpe:2.3:a:enlightenment:imlib2:1.0.1:::::::*
enlightenment	imlib2	1.0.2	cpe:2.3:a:enlightenment:imlib2:1.0.2:::::::*
enlightenment	imlib2	1.0.3	cpe:2.3:a:enlightenment:imlib2:1.0.3:::::::*
enlightenment	imlib2	1.0.4	cpe:2.3:a:enlightenment:imlib2:1.0.4:::::::*
enlightenment	imlib2	1.0.5	cpe:2.3:a:enlightenment:imlib2:1.0.5:::::::*
enlightenment	imlib2	1.1	cpe:2.3:a:enlightenment:imlib2:1.1:::::::*
enlightenment	imlib2	1.1.1	cpe:2.3:a:enlightenment:imlib2:1.1.1:::::::*
imagemagick	imagemagick	5.3.3	cpe:2.3:a:imagemagick:imagemagick:5.3.3:::::::*
imagemagick	imagemagick	5.4.3	cpe:2.3:a:imagemagick:imagemagick:5.4.3:::::::*
imagemagick	imagemagick	5.4.4.5	cpe:2.3:a:imagemagick:imagemagick:5.4.4.5:::::::*
imagemagick	imagemagick	5.4.7	cpe:2.3:a:imagemagick:imagemagick:5.4.7:::::::*
imagemagick	imagemagick	5.4.8	cpe:2.3:a:imagemagick:imagemagick:5.4.8:::::::*
imagemagick	imagemagick	5.4.8.2.1.1.0	cpe:2.3:a:imagemagick:imagemagick:5.4.8.2.1.1.0:::::::*
imagemagick	imagemagick	5.5.3.2.1.2.0	cpe:2.3:a:imagemagick:imagemagick:5.5.3.2.1.2.0:::::::*
imagemagick	imagemagick	5.5.6.0_2003-04-09	cpe:2.3:a:imagemagick:imagemagick:5.5.6.0_2003-04-09:::::::*
imagemagick	imagemagick	5.5.7	cpe:2.3:a:imagemagick:imagemagick:5.5.7:::::::*
imagemagick	imagemagick	6.0.2	cpe:2.3:a:imagemagick:imagemagick:6.0.2:::::::*
sun	java_desktop_system	2.0	cpe:2.3:a:sun:java_desktop_system:2.0:::::::*
sun	java_desktop_system	2003	cpe:2.3:a:sun:java_desktop_system:2003:::::::*
conectiva	linux	9.0	cpe:2.3:o:conectiva:linux:9.0:::::::*
conectiva	linux	10.0	cpe:2.3:o:conectiva:linux:10.0:::::::*
mandrakesoft	mandrake_linux	9.2	cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:::::::*
mandrakesoft	mandrake_linux	9.2	cpe:2.3:o:mandrakesoft:mandrake_linux:9.2::amd64:::::
mandrakesoft	mandrake_linux	10.0	cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:::::::*
mandrakesoft	mandrake_linux	10.0	cpe:2.3:o:mandrakesoft:mandrake_linux:10.0::amd64:::::
mandrakesoft	mandrake_linux_corporate_server	2.1	cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:::::::*
mandrakesoft	mandrake_linux_corporate_server	2.1	cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64:::::
redhat	enterprise_linux	2.1	cpe:2.3:o:redhat:enterprise_linux:2.1::advanced_server:::::
redhat	enterprise_linux	2.1	cpe:2.3:o:redhat:enterprise_linux:2.1::advanced_server_ia64:::::
redhat	enterprise_linux	2.1	cpe:2.3:o:redhat:enterprise_linux:2.1::enterprise_server:::::
redhat	enterprise_linux	2.1	cpe:2.3:o:redhat:enterprise_linux:2.1::enterprise_server_ia64:::::
redhat	enterprise_linux	2.1	cpe:2.3:o:redhat:enterprise_linux:2.1::workstation:::::
redhat	enterprise_linux	2.1	cpe:2.3:o:redhat:enterprise_linux:2.1::workstation_ia64:::::
redhat	enterprise_linux	3.0	cpe:2.3:o:redhat:enterprise_linux:3.0::advanced_servers:::::
redhat	enterprise_linux	3.0	cpe:2.3:o:redhat:enterprise_linux:3.0::enterprise_server:::::
redhat	enterprise_linux	3.0	cpe:2.3:o:redhat:enterprise_linux:3.0::workstation:::::
redhat	enterprise_linux_desktop	3.0	cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:::::::*
redhat	fedora_core	core_1.0	cpe:2.3:o:redhat:fedora_core:core_1.0:::::::*
redhat	fedora_core	core_2.0	cpe:2.3:o:redhat:fedora_core:core_2.0:::::::*
redhat	fedora_core	core_3.0	cpe:2.3:o:redhat:fedora_core:core_3.0:::::::*
redhat	linux_advanced_workstation	2.1	cpe:2.3:o:redhat:linux_advanced_workstation:2.1::ia64:::::
redhat	linux_advanced_workstation	2.1	cpe:2.3:o:redhat:linux_advanced_workstation:2.1::itanium_processor:::::
suse	suse_linux	8.0	cpe:2.3:o:suse:suse_linux:8.0:::::::*
suse	suse_linux	8.0	cpe:2.3:o:suse:suse_linux:8.0::i386:::::
suse	suse_linux	8.1	cpe:2.3:o:suse:suse_linux:8.1:::::::*
suse	suse_linux	8.2	cpe:2.3:o:suse:suse_linux:8.2:::::::*
suse	suse_linux	9.0	cpe:2.3:o:suse:suse_linux:9.0:::::::*
suse	suse_linux	9.0	cpe:2.3:o:suse:suse_linux:9.0::x86_64:::::
suse	suse_linux	9.1	cpe:2.3:o:suse:suse_linux:9.1:::::::*
suse	suse_linux	9.2	cpe:2.3:o:suse:suse_linux:9.2:::::::*
turbolinux	turbolinux_desktop	10.0	cpe:2.3:o:turbolinux:turbolinux_desktop:10.0:::::::*
turbolinux	turbolinux_server	7.0	cpe:2.3:o:turbolinux:turbolinux_server:7.0:::::::*
turbolinux	turbolinux_server	8.0	cpe:2.3:o:turbolinux:turbolinux_server:8.0:::::::*
turbolinux	turbolinux_workstation	7.0	cpe:2.3:o:turbolinux:turbolinux_workstation:7.0:::::::*
turbolinux	turbolinux_workstation	8.0	cpe:2.3:o:turbolinux:turbolinux_workstation:8.0:::::::*
ubuntu	ubuntu_linux	4.1	cpe:2.3:o:ubuntu:ubuntu_linux:4.1::ia64:::::
ubuntu	ubuntu_linux	4.1	cpe:2.3:o:ubuntu:ubuntu_linux:4.1::ppc:::::

References for CVE-2004-0817

URL	Tags
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870	Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1
http://www.debian.org/security/2004/dsa-548	Patch Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml	Patch Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:089
http://www.redhat.com/support/errata/RHSA-2004-465.html	Patch Vendor Advisory
http://www.securityfocus.com/bid/11084	Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/17182
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8843

URL

CVE-2004-0817

Exploit prediction scoring system (EPSS) score for CVE-2004-0817

Common vulnerability scoring system (CVSS) metrics for CVE-2004-0817

Weakness enumeration for CVE-2004-0817

OS Trackers for CVE-2004-0817

Affected software / configurations for CVE-2004-0817

References for CVE-2004-0817