CVE-2004-0687

Published: Oct 20, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file.

Affected (23)

Products: X.org: X11r6 · Xfree86 Project: X11r6 · Openbsd: Openbsd · +1 more

Show all products

X.org: X11r6 · Xfree86 Project: X11r6 · Openbsd: Openbsd · Suse: Suse Linux

1 product

Xfree86 Project

1 product

1 product

1 product

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
X.org X11r6	Version 6.7.0
X.org X11r6	Version 6.8
Xfree86 Project X11r6	Version 3.3.6
Xfree86 Project X11r6	Version 4.0.1
Xfree86 Project X11r6	Version 4.0.2.11
Xfree86 Project X11r6	Version 4.0.3
Xfree86 Project X11r6	Version 4.0
Xfree86 Project X11r6	Version 4.1.0
Xfree86 Project X11r6	Version 4.1.11
Xfree86 Project X11r6	Version 4.1.12
Xfree86 Project X11r6	Version 4.2.0
Xfree86 Project X11r6	Version 4.2.1
Xfree86 Project X11r6	Version 4.2.1
Xfree86 Project X11r6	Version 4.3.0

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openbsd	Version 3.4
Openbsd Openbsd	Version 3.5
Suse Suse Linux	Version 8.1
Suse Suse Linux	Version 8.2
Suse Suse Linux	Version 8
Suse Suse Linux	Version 9.0
Suse Suse Linux	Version 9.0
Suse Suse Linux	Version 9.0
Suse Suse Linux	Version 9.1

References (48)

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000924

Source: cve@mitre.org

http://ftp.x.org/pub/X11R6.8.0/patches/README.xorg-CAN-2004-0687-0688.patch

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2005/May/msg00001.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=109530851323415&w=2

Source: cve@mitre.org

http://packetstormsecurity.com/files/170620/Solaris-10-dtprintinfo-libXm-libXpm-Security-Issues.html

Source: cve@mitre.org

http://scary.beasts.org/security/CESA-2004-003.txt

Source: cve@mitre.org

http://secunia.com/advisories/20235

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-57653-1

Source: cve@mitre.org

http://www.debian.org/security/2004/dsa-560

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200409-34.xml

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200502-07.xml

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/882750

Source: cve@mitre.org

US Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2004:098

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2004_34_xfree86_libs_xshared.html

Source: cve@mitre.org

http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2004-537.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-004.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/434715/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/11196

Source: cve@mitre.org

PatchVendor Advisory

http://www.us-cert.gov/cas/techalerts/TA05-136A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2006/1914

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/17414

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9187

Source: cve@mitre.org

https://usn.ubuntu.com/27-1/

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000924

Source: af854a3a-2127-422b-91ae-364da2661108

http://ftp.x.org/pub/X11R6.8.0/patches/README.xorg-CAN-2004-0687-0688.patch

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2005/May/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=109530851323415&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://packetstormsecurity.com/files/170620/Solaris-10-dtprintinfo-libXm-libXpm-Security-Issues.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://scary.beasts.org/security/CESA-2004-003.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20235

Source: af854a3a-2127-422b-91ae-364da2661108

http://sunsolve.sun.com/search/document.do?assetkey=1-26-57653-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2004/dsa-560

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200409-34.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200502-07.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/882750

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2004:098

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2004_34_xfree86_libs_xshared.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2004-537.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/434715/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/11196

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.us-cert.gov/cas/techalerts/TA05-136A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2006/1914

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/17414

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9187

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/27-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.