NetSight
IP …
high7.5

CVE-2004-0687

Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8…

Impact

Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file.

Affected products

VendorProductAffected versions
X.OrgX11r6
Versions 6.7.0, 6.8
Xfree86 ProjectX11r6
Versions 3.3.6, 4.0, 4.0.1, 4.0.2.11, 4.0.3, 4.1.0
OpenbsdOpenbsd
Versions 3.4, 3.5
SuseSuse Linux
Versions 8, 8.1, 8.2, 9.0, 9.1

References