NVD

Id
71115  
Name
CVE-2004-0688  
Description
Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-10-20  
Modified Date
2017-07-10  
Seq
2004-0688  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
367214 71115 CVE-2004-0688 CLA-2005:924  View
367215 71115 CVE-2004-0688 http://ftp.x.org/pub/X11R6.8.0/patches/README.xorg-CAN-2004-0687-0688.patch  View
367216 71115 CVE-2004-0688 APPLE-SA-2005-05-03  View
367217 71115 CVE-2004-0688 20040915 CESA-2004-004: libXpm  View
367218 71115 CVE-2004-0688 oval:org.mitre.oval:def:11796  View
367219 71115 CVE-2004-0688 http://scary.beasts.org/security/CESA-2004-003.txt  View
367220 71115 CVE-2004-0688 57653  View
367221 71115 CVE-2004-0688 DSA-560  View
367222 71115 CVE-2004-0688 GLSA-200409-34  View
367223 71115 CVE-2004-0688 GLSA-200502-07  View
367224 71115 CVE-2004-0688 VU#537878  View
367225 71115 CVE-2004-0688 MDKSA-2004:098  View
367226 71115 CVE-2004-0688 SUSE-SA:2004:034  View
367227 71115 CVE-2004-0688 FLSA-2006:152803  View
367228 71115 CVE-2004-0688 RHSA-2004:537  View
367229 71115 CVE-2004-0688 RHSA-2005:004  View
367230 71115 CVE-2004-0688 SSRT4848  View
367231 71115 CVE-2004-0688 11196  View
367232 71115 CVE-2004-0688 USN-27-1  View
367233 71115 CVE-2004-0688 TA05-136A  View
367234 71115 CVE-2004-0688 ADV-2006-1914  View
367235 71115 CVE-2004-0688 libxpm-xpmfile-integer-overflow(17416)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63052 JVNDB-2004-000394 libXpm における複数の整数オーバフローの脆弱性 X.Org X11 の libXpm には、XPM 形式のイメージファイルを取り扱う際に、複数の箇所において整数オーバーフローの脆弱性が存在します。 CVE-2004-0688 9115 CVE-2004-0688 71115 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000394.html 2004-09-16 2007-06-04 View