CVEvulnerability

CVE-2004-0688

7.5 HIGH Published 2004-10-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-10-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.

Affected configurations

• x.org x11r6 6.7.0 • x.org x11r6 6.8 • xfree86 project x11r6 3.3.6 • xfree86 project x11r6 4.0 • xfree86 project x11r6 4.0.1 • xfree86 project x11r6 4.0.2.11 • xfree86 project x11r6 4.0.3 • xfree86 project x11r6 4.1.0 • xfree86 project x11r6 4.1.11 • xfree86 project x11r6 4.1.12 • xfree86 project x11r6 4.2.0 • xfree86 project x11r6 4.2.1 • xfree86 project x11r6 4.3.0 • openbsd openbsd 3.4 • openbsd openbsd 3.5 • suse suse linux 8 • suse suse linux 8.1 • suse suse linux 8.2 • suse suse linux 9.0 • suse suse linux 9.1

References