Published: 20/10/2004 Updated: 11/08/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and previous versions, and gdk-pixbuf prior to 0.22, may allow remote malicious users to execute arbitrary code via a certain color string. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0688).

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnome gdkpixbuf 0.22
gnome gdkpixbuf 0.18
gnome gdkpixbuf 0.17
gnome gdkpixbuf 0.20
gnome gtk 2.0.2
gnome gtk 2.0.6
gnome gtk 2.2.1
gnome gtk 2.2.3
gnome gtk 2.2.4

Synopsis gdk-pixbuf security update Type/Severity Security Advisory: Important Topic Updated gdk-pixbuf packages that fix several security flaws are now available Description The gdk-pixbuf package contains an image loading library used with theGNOME GUI desktop environment[Updated 15th S ...

Synopsis gtk2 security update Type/Severity Security Advisory: Important Topic Updated gtk2 packages that fix several security flaws and bugs are nowavailable Description The gtk2 package contains the GIMP ToolKit (GTK+), a library for creatinggraphical user interfaces for the X Window Sys ...

CWE-787 http://www.redhat.com/support/errata/RHSA-2004-447.html http://www.redhat.com/support/errata/RHSA-2004-466.html http://scary.beasts.org/security/CESA-2004-005.txt https://bugzilla.fedora.us/show_bug.cgi?id=2005 http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095 http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096 http://www.kb.cert.org/vuls/id/369358 http://secunia.com/advisories/17657 http://sunsolve.sun.com/search/document.do?assetkey=1-26-101776-1 http://www.securityfocus.com/bid/11195 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875 http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 http://marc.info/?l=bugtraq&m=109528994916275&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/17385 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9348 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1786 http://www.securityfocus.com/archive/1/419771/100/0/threaded https://access.redhat.com/errata/RHSA-2004:447 https://nvd.nist.gov https://www.kb.cert.org/vuls/id/369358

CVE-2004-0783

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect