Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used...

10 CVSS

Vulnerability Description

Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE's content decisions.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0914

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from lesstif

View All →

CVE-2006-4124

The libXm library in LessTif 0.95.0 and earlier allows local...

Medium 4.6

CVE-2005-0605

scan.c for LibXPM may allow attackers to execute arbitrary code...

High 7.5

Affected Vendor

lesstif

View all reports →

Affected Software

lesstif, x11r6, linux, fedora core, suse linux

Vulnerable Versions:

0.93, 0.93.12, 0.93.18, 0.93.34, 0.93.36, 0.93.40, 0.93.91, 0.93.94, 0.93.96, 6.7.0, 6.8, 6.8.1, 3.3, 3.3.2, 3.3.3, 3.3.4, 3.3.5, 3.3.6, 4.0, 4.0.1, 4.0.2.11, 4.0.3, 4.1.0, 4.1.11, 4.1.12, 4.2.0, 4.2.1, 4.3.0, core_2.0, core_3.0, 1.0, 8, 8.1, 8.2, 9.0, 9.1, 9.2

Timeline

Official Publish: December 15th, 2004

Last Modified: August 8th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.