CVE-2004-0687
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 8.1%
exploitation probability
8.1%top 5% of all CVEs
observed exploitation
nono source reports it
Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file.
Affected products
n/a · n/aReferences
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000924http://ftp.x.org/pub/X11R6.8.0/patches/README.xorg-CAN-2004-0687-0688.patchhttp://lists.apple.com/archives/security-announce/2005/May/msg00001.htmlhttp://marc.info/?l=bugtraq&m=109530851323415&w=2http://packetstormsecurity.com/files/170620/Solaris-10-dtprintinfo-libXm-libXpm-Security-Issues.htmlhttp://scary.beasts.org/security/CESA-2004-003.txthttp://secunia.com/advisories/20235https://exchange.xforce.ibmcloud.com/vulnerabilities/17414https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9187http://sunsolve.sun.com/search/document.do?assetkey=1-26-57653-1https://usn.ubuntu.com/27-1/http://www.debian.org/security/2004/dsa-560