Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Libxpm | — | Apply OS X security update 2005-005 | Dec 16, 2011 | Oct 20, 2004 |
| Freebsd | — | Upgrade XFree86-librariesUpgrade zh-cle_baseUpgrade linux-openmotifUpgrade xpmUpgrade mupadUpgrade linux_baseUpgrade open-motif-develUpgrade libXpmUpgrade lesstifUpgrade agenda-snow-libsUpgrade xorg-librariesUpgrade open-motif | Dec 10, 2025 | Sep 15, 2004 |
| Gentoo Linux | — | Upgrade x11-libs/lesstif.Upgrade x11-base/xfree.Upgrade x11-base/xorg-x11.Upgrade x11-libs/openmotif. | Oct 30, 2017 | Oct 20, 2004 |
| Suse | — | Upgrade openmotif-develUpgrade XFree86-libsUpgrade openmotif-libs-64bitUpgrade xorg-x11-develUpgrade xorg-x11-devel-64bitUpgrade XFree86-libs-x86Upgrade openmotif-libs-32bitUpgrade openmotif21-libsUpgrade openmotif-devel-32bitUpgrade XFree86-libs-64bitUpgrade XFree86-libs-32bitUpgrade openmotifUpgrade openmotif-devel-64bitUpgrade openmotif-libsUpgrade xorg-x11-devel-32bit | Feb 17, 2015 | Oct 20, 2004 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub