Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Libxpm | — | Apply OS X security update 2005-005 | Dec 16, 2011 | Oct 20, 2004 |
| Freebsd | — | Upgrade zh-cle_baseUpgrade linux-openmotifUpgrade libXpmUpgrade open-motif-develUpgrade xorg-librariesUpgrade lesstifUpgrade mupadUpgrade xpmUpgrade linux_baseUpgrade agenda-snow-libsUpgrade XFree86-librariesUpgrade open-motif | Dec 10, 2025 | Sep 15, 2004 |
| Gentoo Linux | — | Upgrade x11-base/xorg-x11.Upgrade x11-libs/lesstif.Upgrade x11-libs/openmotif.Upgrade x11-base/xfree. | Oct 30, 2017 | Oct 20, 2004 |
| Suse | — | Upgrade XFree86-libs-x86Upgrade openmotif-devel-64bitUpgrade openmotif-devel-32bitUpgrade XFree86-libsUpgrade XFree86-libs-64bitUpgrade XFree86-libs-32bitUpgrade xorg-x11-devel-64bitUpgrade openmotifUpgrade xorg-x11-develUpgrade xorg-x11-devel-32bitUpgrade openmotif21-libsUpgrade openmotif-develUpgrade openmotif-libs-32bitUpgrade openmotif-libsUpgrade openmotif-libs-64bit | Feb 17, 2015 | Oct 20, 2004 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub