# CVEs published 2004-09-17

13 CVEs were published on September 17, 2004: 0 critical, 1 high. Days are UTC.

- [CVE-2004-0200](https://cve.now/CVE-2004-0200.md): Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote (no CVSS)
- [CVE-2004-0558](https://cve.now/CVE-2004-0558.md): The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang (no CVSS)
- [CVE-2004-0573](https://cve.now/CVE-2004-0573.md): Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 al (no CVSS)
- [CVE-2004-0747](https://cve.now/CVE-2004-0747.md): Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow duri (CVSS 7.8)
- [CVE-2004-0753](https://cve.now/CVE-2004-0753.md): The BMP image processor for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (infin (no CVSS)
- [CVE-2004-0782](https://cve.now/CVE-2004-0782.md): Integer overflow in pixbuf\_create\_from\_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22 (no CVSS)
- [CVE-2004-0783](https://cve.now/CVE-2004-0783.md): Stack-based buffer overflow in xpm\_extract\_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf befor (no CVSS)
- [CVE-2004-0786](https://cve.now/CVE-2004-0786.md): The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service (chi (no CVSS)
- [CVE-2004-0788](https://cve.now/CVE-2004-0788.md): Integer overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial (no CVSS)
- [CVE-2004-0799](https://cve.now/CVE-2004-0799.md): The HTTP daemon in Ipswitch WhatsUp Gold 8.03 and 8.03 Hotfix 1 allows remote attackers to cause a denial of service (server crash) via a GE (no CVSS)
- [CVE-2004-0809](https://cve.now/CVE-2004-0809.md): The mod\_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain seq (no CVSS)
- [CVE-2004-0817](https://cve.now/CVE-2004-0817.md): Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file. (no CVSS)
- [CVE-2004-0849](https://cve.now/CVE-2004-0849.md): Integer overflow in the asn\_decode\_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled wi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-09-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.