Vulnerability in Openbsd
CVE-2004-0688
Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary…
EPSS: 0.072 (93.7th percentile) — read the EPSS interpretation.
Affected products
- Openbsd — versions 3.4, 3.5
- Xfree86_project X11r6 — versions 3.3.6, 4.0, 4.0.1
- X.org X11r6 — versions 6.7.0, 6.8
- Suse Suse_linux — versions 8, 8.1, 8.2
- N/a — versions n/a
References
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (x_refsource_UBUNTU, vendor-advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (vendor-advisory, x_refsource_GENTOO)
- cve@mitre.org (US Government Resource, x_refsource_CERT, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
- cve@mitre.org (x_refsource_HP, vendor-advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)