CVE-2004-0688

libXpm <6.8.1 - Remote Code Execution

Title source: manual
STIX 2.1

Description

Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.

References (23)

Core 23
Core References
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/537878
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-004.html
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200409-34.xml
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA05-136A.html
Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp
http://www.securityfocus.com/archive/1/434715/100/0/threaded
Vendor Advisory vendor-advisory x_refsource_conectiva
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000924
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/27-1/
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/1914
Vendor Advisory vendor-advisory x_refsource_mandrake
http://www.mandriva.com/security/advisories?name=MDKSA-2004:098
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2004-537.html
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=109530851323415&w=2
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2004/dsa-560
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11796
Various Sources x_refsource_misc
http://scary.beasts.org/security/CESA-2004-003.txt
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/17416
Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/11196
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200502-07.xml
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20235
Vendor Advisory vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57653-1

Scores

EPSS 0.1603
EPSS Percentile 94.9%

Details

Status published
Products (20)
openbsd/openbsd 3.4
openbsd/openbsd 3.5
suse/suse_linux 8
suse/suse_linux 8.1
suse/suse_linux 8.2
suse/suse_linux 9.0 (3 CPE variants)
suse/suse_linux 9.1
x.org/x11r6 6.7.0
x.org/x11r6 6.8
xfree86_project/x11r6 3.3.6
... and 10 more
Published Oct 20, 2004
Tracked Since Feb 18, 2026