NetSight
IP …
high7.5

CVE-2004-0688

Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPu…

Impact

Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.

Affected products

VendorProductAffected versions
X.OrgX11r6
Versions 6.7.0, 6.8
Xfree86 ProjectX11r6
Versions 3.3.6, 4.0, 4.0.1, 4.0.2.11, 4.0.3, 4.1.0
OpenbsdOpenbsd
Versions 3.4, 3.5
SuseSuse Linux
Versions 8, 8.1, 8.2, 9.0, 9.1

References