CVE-2004-0782: Buffer Overflow
Integer overflow in pixbufcreatefromxpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain ncol and cpp values that enable a heap-based buffer overflow. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0687).
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0782?
CVE-2004-0782 has a high severity due to the potential for remote code execution caused by a heap-based buffer overflow.
How do I fix CVE-2004-0782?
To fix CVE-2004-0782, update your GdkPixbuf and GTK versions to the latest stable releases that include patches.
Which software is affected by CVE-2004-0782?
CVE-2004-0782 affects GdkPixbuf versions 0.17 to 0.22 and GTK versions up to 2.4.4.
Is CVE-2004-0782 a remote vulnerability?
Yes, CVE-2004-0782 is classified as a remote vulnerability that allows attackers to exploit the software from a distance.
What type of vulnerability is CVE-2004-0782?
CVE-2004-0782 is an integer overflow vulnerability that leads to a buffer overflow in the image decoding process.