CVE-2004-0782
Fixed in a distro release EPSS 9%
Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain n_col and cpp values that enable a heap-based buffer overflow. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0687).
Products: gnome gdkpixbuf, gnome gtk
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | gdk-pixbuf | 0.22.0-7 |
| Debian 12 | gtk+2.0 | 2.4.9-2 |
| Debian 13 | gdk-pixbuf | 0.22.0-7 |
| Debian 13 | gtk+2.0 | 2.4.9-2 |
| Debian 14 | gdk-pixbuf | 0.22.0-7 |
| Debian 14 | gtk+2.0 | 2.4.9-2 |
| Debian 3.0 | gdk-pixbuf | 0.17.0-2woody2 |
| Debian 3.0 | gtk+2.0 | 2.0.2-5woody2 |
| Red Hat Enterprise Linux 3 | gdk-pixbuf | 1:0.22.0-11.3.3 |
| Red Hat Enterprise Linux 3 | gdk-pixbuf-debuginfo | 1:0.22.0-11.3.3 |
| Red Hat Enterprise Linux 3 | gdk-pixbuf-devel | 1:0.22.0-11.3.3 |
| Red Hat Enterprise Linux 3 | gdk-pixbuf-gnome | 1:0.22.0-11.3.3 |
| Red Hat Enterprise Linux 3 | gtk2 | 0:2.2.4-8.1 |
| Red Hat Enterprise Linux 3 | gtk2-debuginfo | 0:2.2.4-8.1 |
| Red Hat Enterprise Linux 3 | gtk2-devel | 0:2.2.4-8.1 |