7.5

CVE-2004-0782

Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain n_col and cpp values that enable a heap-based buffer overflow.  NOTE: this identifier is ONLY for gtk+.  It was incorrectly referenced in an advisory for a different issue (CVE-2004-0687).

Data is provided by the National Vulnerability Database (NVD)
GnomeGdkpixbuf Version0.17
GnomeGdkpixbuf Version0.18
GnomeGdkpixbuf Version0.20
GnomeGdkpixbuf Version0.22
GnomeGtk Version2.0.2
GnomeGtk Version2.0.6
GnomeGtk Version2.2.1
GnomeGtk Version2.2.3
GnomeGtk Version2.2.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 30.05% 0.962
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
http://www.securityfocus.com/bid/11195
Third Party Advisory
VDB Entry
http://www.kb.cert.org/vuls/id/729894
Third Party Advisory
US Government Resource