7.5

CVE-2004-0688

Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.

Data is provided by the National Vulnerability Database (NVD)
X.Org ≫ X11r6 Version6.7.0
X.Org ≫ X11r6 Version6.8
Xfree86 Project ≫ X11r6 Version3.3.6
Xfree86 Project ≫ X11r6 Version4.0
Xfree86 Project ≫ X11r6 Version4.0.1
Xfree86 Project ≫ X11r6 Version4.0.2.11
Xfree86 Project ≫ X11r6 Version4.0.3
Xfree86 Project ≫ X11r6 Version4.1.0
Xfree86 Project ≫ X11r6 Version4.1.11
Xfree86 Project ≫ X11r6 Version4.1.12
Xfree86 Project ≫ X11r6 Version4.2.0
Xfree86 Project ≫ X11r6 Version4.2.1
Xfree86 Project ≫ X11r6 Version4.2.1 Editionerrata
Xfree86 Project ≫ X11r6 Version4.3.0
Openbsd ≫ Openbsd Version3.4
Openbsd ≫ Openbsd Version3.5
Suse ≫ Suse Linux Version8 Editionenterprise_server
Suse ≫ Suse Linux Version8.1
Suse ≫ Suse Linux Version8.2
Suse ≫ Suse Linux Version9.0
Suse ≫ Suse Linux Version9.0 Editionenterprise_server
Suse ≫ Suse Linux Version9.0 Editionx86_64
Suse ≫ Suse Linux Version9.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 16.03% 0.942
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P