Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Libxpm | — | Apply OS X security update 2005-005 | Dec 16, 2011 | Oct 20, 2004 |
| Freebsd | — | Upgrade zh-cle_baseUpgrade open-motif-develUpgrade libXpmUpgrade xorg-librariesUpgrade linux_baseUpgrade xpmUpgrade mupadUpgrade linux-openmotifUpgrade lesstifUpgrade agenda-snow-libsUpgrade XFree86-librariesUpgrade open-motif | Dec 10, 2025 | Sep 15, 2004 |
| Gentoo Linux | — | Upgrade x11-libs/lesstif.Upgrade x11-libs/openmotif.Upgrade x11-base/xorg-x11.Upgrade x11-base/xfree. | Oct 30, 2017 | Oct 20, 2004 |
| Suse | — | Upgrade openmotif-devel-64bitUpgrade XFree86-libs-x86Upgrade openmotif-devel-32bitUpgrade XFree86-libs-64bitUpgrade openmotif-libs-64bitUpgrade openmotif-libs-32bitUpgrade XFree86-libsUpgrade xorg-x11-devel-64bitUpgrade openmotifUpgrade xorg-x11-develUpgrade XFree86-libs-32bitUpgrade openmotif21-libsUpgrade openmotif-libsUpgrade openmotif-develUpgrade xorg-x11-devel-32bit | Feb 17, 2015 | Oct 20, 2004 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub