Skip to main content
← All vulnerabilities
CVE-2004-0783

Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf befor

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub

Summary

Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a certain color string. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0688).

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 17

sunsolve.sun.com

bugzilla.fedora.us

scary.beasts.org

oval.cisecurity.org

redhat.com

marc.info

exchange.xforce.ibmcloud.com

kb.cert.org

mandriva.com

securityfocus.com

mandrakesecure.net

distro.conectiva.com.br

secunia.com