Vulnerability in OpenBSD
CVE-2004-0687
Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file.
EPSS: 0.081 (94.5th percentile) — read the EPSS interpretation.
Affected products
- Openbsd — versions 3.4, 3.5
- Xfree86_project X11r6 — versions 3.3.6, 4.0, 4.0.1
- X.org X11r6 — versions 6.7.0, 6.8
- Suse Suse_linux — versions 8, 8.1, 8.2
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory)
- cve@mitre.org (vendor-advisory)
- cve@mitre.org (vdb-entry)
- cve@mitre.org (vendor-advisory)
- cve@mitre.org (US Government Resource, third-party-advisory)
- cve@mitre.org (US Government Resource, third-party-advisory)
- cve@mitre.org (vendor-advisory)
- cve@mitre.org (vendor-advisory)
- cve@mitre.org (vendor-advisory)
- cve@mitre.org (mailing-list)