CVE - CVE-2004-0782

CVE-ID
CVE-2004-0782	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain n_col and cpp values that enable a heap-based buffer overflow. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0687).
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20040915 CESA-2004-005: gtk+ XPM decoder URL:http://marc.info/?l=bugtraq&m=109528994916275&w=2 MISC:http://scary.beasts.org/security/CESA-2004-005.txt CONECTIVA:CLA-2004:875 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875 DEBIAN:DSA-546 URL:http://www.debian.org/security/2004/dsa-546 FEDORA:FLSA:2005 URL:https://bugzilla.fedora.us/show_bug.cgi?id=2005 FEDORA:FLSA-2005:155510 URL:http://www.securityfocus.com/archive/1/archive/1/419771/100/0/threaded MANDRAKE:MDKSA-2004:095 URL:http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095 MANDRIVA:MDKSA-2005:214 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 REDHAT:RHSA-2004:447 URL:http://www.redhat.com/support/errata/RHSA-2004-447.html REDHAT:RHSA-2004:466 URL:http://www.redhat.com/support/errata/RHSA-2004-466.html SUNALERT:101776 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-101776-1 CERT-VN:VU#729894 URL:http://www.kb.cert.org/vuls/id/729894 BID:11195 URL:http://www.securityfocus.com/bid/11195 OVAL:oval:org.mitre.oval:def:1617 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1617 OVAL:oval:org.mitre.oval:def:11539 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11539 SECUNIA:17657 URL:http://secunia.com/advisories/17657 XF:gtk-xpm-pixbufcreatefromxpm-bo(17386) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/17386
Assigning CNA
N/A
Date Entry Created
20040817	Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20040817)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE list, which standardizes names for security problems.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org

Common Vulnerabilities and Exposures

CVE-2004-0782