NVD

Id
71316  
Name
CVE-2004-0914  
Description
Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE's content decisions.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2005-01-10  
Modified Date
2017-07-10  
Seq
2004-0914  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
368641 71316 CVE-2004-0914 oval:org.mitre.oval:def:9943  View
368642 71316 CVE-2004-0914 RHSA-2004:537  View
368643 71316 CVE-2004-0914 DSA-607  View
368644 71316 CVE-2004-0914 GLSA-200411-28  View
368645 71316 CVE-2004-0914 GLSA-200502-06  View
368646 71316 CVE-2004-0914 GLSA-200502-07  View
368647 71316 CVE-2004-0914 FEDORA-2004-433  View
368648 71316 CVE-2004-0914 MDKSA-2004:137  View
368649 71316 CVE-2004-0914 FLSA-2006:152803  View
368650 71316 CVE-2004-0914 RHSA-2004:610  View
368651 71316 CVE-2004-0914 RHSA-2005:004  View
368652 71316 CVE-2004-0914 11694  View
368653 71316 CVE-2004-0914 USN-83-1  View
368654 71316 CVE-2004-0914 USN-83-2  View
368655 71316 CVE-2004-0914 http://www.x.org/pub/X11R6.8.1/patches/README.xorg-681-CAN-2004-0914.patch  View
368656 71316 CVE-2004-0914 HPSBTU01228  View
368657 71316 CVE-2004-0914 libxpm-image-bo(18142):  View
368658 71316 CVE-2004-0914 libxpm-improper-memory-access(18144):  View
368659 71316 CVE-2004-0914 libxpm-command-execution(18145):  View
368660 71316 CVE-2004-0914 libxpm-directory-traversal(18146):  View
368661 71316 CVE-2004-0914 libxpm-dos(18147)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63151 JVNDB-2004-000493 libXpm の不正な XPM ファイルの処理による複数の脆弱性 OpenMotif および X.org X11 に含まれている libXpm には、XPM ファイルの処理において、(1) 整数オーバーフローを生じる (2) 不正なメモリアクセスが可能となる (3) ディレクトリトラバーサル攻撃を受ける (4) 無限ループに陥る (5) メモリリークが発生する脆弱性が存在します。 CVE-2004-0914 9341 CVE-2004-0914 71316 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000493.html 2004-11-17 2007-06-04 View