Published: 20/10/2004 Updated: 11/08/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and previous versions, and gdk-pixbuf prior to 0.22, allows remote malicious users to execute arbitrary code via certain n_col and cpp values that enable a heap-based buffer overflow. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0687).

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnome gdkpixbuf 0.22
gnome gdkpixbuf 0.18
gnome gdkpixbuf 0.17
gnome gdkpixbuf 0.20
gnome gtk 2.0.2
gnome gtk 2.0.6
gnome gtk 2.2.1
gnome gtk 2.2.3
gnome gtk 2.2.4

Synopsis gdk-pixbuf security update Type/Severity Security Advisory: Important Topic Updated gdk-pixbuf packages that fix several security flaws are now available Description The gdk-pixbuf package contains an image loading library used with theGNOME GUI desktop environment[Updated 15th S ...

Synopsis gtk2 security update Type/Severity Security Advisory: Important Topic Updated gtk2 packages that fix several security flaws and bugs are nowavailable Description The gtk2 package contains the GIMP ToolKit (GTK+), a library for creatinggraphical user interfaces for the X Window Sys ...

Chris Evans discovered several problems in gdk-pixbuf, the GdkPixBuf library used in Gtk It is possible for an attacker to execute arbitrary code on the victims machine Gdk-pixbuf for Gtk+12 is an external package For Gtk+20 it's part of the main gtk package The Common Vulnerabilities and Exposures Project identifies the following vulnerabili ...

NVD-CWE-Other http://www.redhat.com/support/errata/RHSA-2004-447.html http://www.redhat.com/support/errata/RHSA-2004-466.html http://scary.beasts.org/security/CESA-2004-005.txt http://www.debian.org/security/2004/dsa-546 https://bugzilla.fedora.us/show_bug.cgi?id=2005 http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095 http://www.kb.cert.org/vuls/id/729894 http://secunia.com/advisories/17657 http://sunsolve.sun.com/search/document.do?assetkey=1-26-101776-1 http://www.securityfocus.com/bid/11195 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875 http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 http://marc.info/?l=bugtraq&m=109528994916275&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/17386 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1617 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11539 http://www.securityfocus.com/archive/1/419771/100/0/threaded https://access.redhat.com/errata/RHSA-2004:447 https://nvd.nist.gov https://www.kb.cert.org/vuls/id/729894

CVE-2004-0782

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect