CVE-2004-0914
Description
Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE's content decisions.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lesstif lesstif | 0.93, 0.93.12, 0.93.18, 0.93.34, 0.93.36, 0.93.40, 0.93.91, 0.93.94, 0.93.96 | — |
| x.org x11r6 | 6.7.0, 6.8, 6.8.1 | — |
| xfree86_project x11r6 | 3.3, 3.3.2, 3.3.3, 3.3.4, 3.3.5, 3.3.6, 4.0, 4.0.1, 4.0.2.11, 4.0.3, 4.1.0, 4.1.11, 4.1.12, 4.2.0, 4.2.1, 4.3.0 | — |
| gentoo linux | No range specified | — |
| redhat fedora_core | core_2.0, core_3.0 | — |
| suse suse_linux | 1.0, 8, 8.1, 8.2, 9.0, 9.1, 9.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.