CVE-2004-0687: Buffer Overflow
Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0687?
CVE-2004-0687 is rated as high risk due to stack-based buffer overflows that can lead to remote code execution.
How do I fix CVE-2004-0687?
To fix CVE-2004-0687, upgrade to libXpm version 6.8.1 or later, which contains the necessary security patches.
Who is affected by CVE-2004-0687?
CVE-2004-0687 affects users of libXpm versions prior to 6.8.1, including specific versions of X.org and XFree86.
What causes CVE-2004-0687?
CVE-2004-0687 is caused by multiple stack-based buffer overflows in the handling of malformed XPM image files.
Can CVE-2004-0687 be exploited remotely?
Yes, CVE-2004-0687 can be exploited remotely by sending a malicious XPM image file to a vulnerable application.