CVE

Id
9116  
CVE No.
CVE-2004-0688  
Status
Candidate  
Description
Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.  
Phase
Assigned (20040713)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
59388 9116 CVE-2004-0688 BUGTRAQ:20040915 CESA-2004-004: libXpm  View
59389 9116 CVE-2004-0688 URL:http://marc.info/?l=bugtraq&m=109530851323415&w=2  View
59390 9116 CVE-2004-0688 MISC:http://scary.beasts.org/security/CESA-2004-003.txt  View
59391 9116 CVE-2004-0688 CONFIRM:http://ftp.x.org/pub/X11R6.8.0/patches/README.xorg-CAN-2004-0687-0688.patch  View
59392 9116 CVE-2004-0688 APPLE:APPLE-SA-2005-05-03  View
59393 9116 CVE-2004-0688 URL:http://lists.apple.com/archives/security-announce/2005/May/msg00001.html  View
59394 9116 CVE-2004-0688 CONECTIVA:CLA-2005:924  View
59395 9116 CVE-2004-0688 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000924  View
59396 9116 CVE-2004-0688 DEBIAN:DSA-560  View
59397 9116 CVE-2004-0688 URL:http://www.debian.org/security/2004/dsa-560  View
59398 9116 CVE-2004-0688 FEDORA:FLSA-2006:152803  View
59399 9116 CVE-2004-0688 URL:http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html  View
59400 9116 CVE-2004-0688 GENTOO:GLSA-200409-34  View
59401 9116 CVE-2004-0688 URL:http://www.gentoo.org/security/en/glsa/glsa-200409-34.xml  View
59402 9116 CVE-2004-0688 GENTOO:GLSA-200502-07  View
59403 9116 CVE-2004-0688 URL:http://www.gentoo.org/security/en/glsa/glsa-200502-07.xml  View
59404 9116 CVE-2004-0688 HP:HPSBUX02119  View
59405 9116 CVE-2004-0688 URL:http://www.securityfocus.com/archive/1/archive/1/434715/100/0/threaded  View
59406 9116 CVE-2004-0688 HP:SSRT4848  View
59407 9116 CVE-2004-0688 URL:http://www.securityfocus.com/archive/1/archive/1/434715/100/0/threaded  View
59408 9116 CVE-2004-0688 MANDRAKE:MDKSA-2004:098  View
59409 9116 CVE-2004-0688 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:098  View
59410 9116 CVE-2004-0688 REDHAT:RHSA-2004:537  View
59411 9116 CVE-2004-0688 URL:http://www.redhat.com/support/errata/RHSA-2004-537.html  View
59412 9116 CVE-2004-0688 REDHAT:RHSA-2005:004  View
59413 9116 CVE-2004-0688 URL:http://www.redhat.com/support/errata/RHSA-2005-004.html  View
59414 9116 CVE-2004-0688 SUNALERT:57653  View
59415 9116 CVE-2004-0688 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-57653-1  View
59416 9116 CVE-2004-0688 SUSE:SUSE-SA:2004:034  View
59417 9116 CVE-2004-0688 URL:http://www.novell.com/linux/security/advisories/2004_34_xfree86_libs_xshared.html  View
59418 9116 CVE-2004-0688 UBUNTU:USN-27-1  View
59419 9116 CVE-2004-0688 URL:http://www.ubuntulinux.org/support/documentation/usn/usn-27-1  View
59420 9116 CVE-2004-0688 CERT:TA05-136A  View
59421 9116 CVE-2004-0688 URL:http://www.us-cert.gov/cas/techalerts/TA05-136A.html  View
59422 9116 CVE-2004-0688 CERT-VN:VU#537878  View
59423 9116 CVE-2004-0688 URL:http://www.kb.cert.org/vuls/id/537878  View
59424 9116 CVE-2004-0688 BID:11196  View
59425 9116 CVE-2004-0688 URL:http://www.securityfocus.com/bid/11196  View
59426 9116 CVE-2004-0688 OVAL:oval:org.mitre.oval:def:11796  View
59427 9116 CVE-2004-0688 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11796  View
59428 9116 CVE-2004-0688 VUPEN:ADV-2006-1914  View
59429 9116 CVE-2004-0688 URL:http://www.vupen.com/english/advisories/2006/1914  View
59430 9116 CVE-2004-0688 SECUNIA:20235  View
59431 9116 CVE-2004-0688 URL:http://secunia.com/advisories/20235  View
59432 9116 CVE-2004-0688 XF:libxpm-xpmfile-integer-overflow(17416)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62976 JVNDB-2004-000318 KDE の一時ディレクトリにおけるシンボリックリンク攻撃を受ける脆弱性 KDE には、startkde スクリプトにより行われるシンボリックリンクの妥当性の確認が適切に行われない脆弱性が存在します。 CVE-2004-0689 9116 4.6 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000318.html  View