CVE-2004-0783

2004-10-2000:00:00

ubuntu.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.305 Low

EPSS

Percentile

96.9%

JSON

Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM
image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before
0.22, may allow remote attackers to execute arbitrary code via a certain
color string. NOTE: this identifier is ONLY for gtk+. It was incorrectly
referenced in an advisory for a different issue (CVE-2004-0688).

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchgtk+2.0< 2.8.20-0ubuntu1.1UNKNOWN
ubuntu6.10noarchgtk+2.0< 2.10.6-0ubuntu3.1UNKNOWN
ubuntu7.04noarchgtk+2.0< 2.10.11-0ubuntu3UNKNOWN