CVE-2004-0688
Fixed in a distro release EPSS 7%
Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.
Products: x.org x11r6, xfree86_project x11r6, openbsd, suse_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | lesstif1-1 | 0.93.18-5 |
| Debian 3.0 | xfree86 | 4.1.0-16woody4 |
| Red Hat Enterprise Linux 3 | XFree86 | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-100dpi-fonts | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-75dpi-fonts | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-ISO8859-14-100dpi-fonts | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-ISO8859-14-75dpi-fonts | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-ISO8859-15-100dpi-fonts | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-ISO8859-15-75dpi-fonts | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-ISO8859-2-100dpi-fonts | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-ISO8859-2-75dpi-fonts | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-ISO8859-9-100dpi-fonts | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-ISO8859-9-75dpi-fonts | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-Mesa-libGL | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-Mesa-libGLU | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-Xnest | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-Xvfb | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-base-fonts | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-cyrillic-fonts | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-devel | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-doc | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-font-utils | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-libs | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-libs-data | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-sdk | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-syriac-fonts | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-tools | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-truetype-fonts | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-twm | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-xauth | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-xdm | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | XFree86-xfs | 0:4.3.0-69.EL |
| Red Hat Enterprise Linux 3 | openmotif | 0:2.2.3-4.RHEL3.4 |
| Red Hat Enterprise Linux 3 | openmotif-debuginfo | 0:2.2.3-4.RHEL3.4 |
| Red Hat Enterprise Linux 3 | openmotif-devel | 0:2.2.3-4.RHEL3.4 |
| Red Hat Enterprise Linux 3 | openmotif21 | 0:2.1.30-9.RHEL3.4 |
| Red Hat Enterprise Linux 3 | openmotif21-debuginfo | 0:2.1.30-9.RHEL3.4 |
| Red Hat network satellite 4.2 | jabberd | 0:2.0s10-3.37.rhn |
| Red Hat network satellite 4.2 | jabberd | 0:2.0s10-3.38.rhn |
| Red Hat network satellite 4.2 | java-1.4.2-ibm | 0:1.4.2.10-1jpp.2.el3 |
| Red Hat network satellite 4.2 | java-1.4.2-ibm | 0:1.4.2.10-1jpp.2.el4 |
| Red Hat network satellite 4.2 | java-1.4.2-ibm-devel | 0:1.4.2.10-1jpp.2.el3 |
| Red Hat network satellite 4.2 | java-1.4.2-ibm-devel | 0:1.4.2.10-1jpp.2.el4 |
| Red Hat network satellite 4.2 | jfreechart | 0:0.9.20-3.rhn |
| Red Hat network satellite 4.2 | openmotif21 | 0:2.1.30-9.RHEL3.8 |
| Red Hat network satellite 4.2 | openmotif21 | 0:2.1.30-11.RHEL4.6 |
| Red Hat network satellite 4.2 | openmotif21-debuginfo | 0:2.1.30-9.RHEL3.8 |
| Red Hat network satellite 4.2 | openmotif21-debuginfo | 0:2.1.30-11.RHEL4.6 |
| Red Hat network satellite 4.2 | perl-Crypt-CBC | 0:2.24-1.el3 |
| Red Hat network satellite 4.2 | perl-Crypt-CBC | 0:2.24-1.el4 |
| Red Hat network satellite 4.2 | rhn-apache | 0:1.3.27-36.rhn.rhel3 |
| Red Hat network satellite 4.2 | rhn-apache | 0:1.3.27-36.rhn.rhel4 |
| Red Hat network satellite 4.2 | rhn-modjk-ap13 | 0:1.2.23-2rhn.rhel3 |
| Red Hat network satellite 4.2 | rhn-modjk-ap13 | 0:1.2.23-2rhn.rhel4 |
| Red Hat network satellite 4.2 | rhn-modperl | 0:1.29-16.rhel3 |
| Red Hat network satellite 4.2 | rhn-modperl | 0:1.29-16.rhel4 |
| Red Hat network satellite 4.2 | rhn-modssl | 0:2.8.12-8.rhn.10.rhel3 |
| Red Hat network satellite 4.2 | rhn-modssl | 0:2.8.12-8.rhn.10.rhel4 |
| Red Hat network satellite 4.2 | tomcat5 | 0:5.0.30-0jpp_10rh |