← Database

CVE-2004-0688

HIGH CVSS: 7.5 Published: 2004-10-20 Modified: 2026-06-16

Description

Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.

Affected Platforms

X.Org X11R6Xfree86 Project X11R6Openbsd OpenbsdSuse Suse Linux

Weakness Type

NVD-CWE-Other

References