CVE-2004-0688: Integer Overflow
Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0688?
CVE-2004-0688 has a high severity level due to its potential to allow remote code execution through manipulated XPM image files.
How do I fix CVE-2004-0688?
To fix CVE-2004-0688, upgrade to libXpm version 6.8.1 or later, which includes patches addressing these integer overflow vulnerabilities.
Which software is affected by CVE-2004-0688?
CVE-2004-0688 affects libXpm versions prior to 6.8.1, including various X.org and XFree86 X server versions.
What type of vulnerability is CVE-2004-0688?
CVE-2004-0688 is categorized as an integer overflow vulnerability in specific functions that handle parsing of XPM image files.
Can CVE-2004-0688 be exploited remotely?
Yes, CVE-2004-0688 can be exploited remotely when an attacker sends a specially crafted XPM image file to the target system.