CVE-2004-0783 — Out-of-bounds Write in Gdkpixbuf

CWE-787 — Out-of-bounds Write8 documents7 sources
Severity
7.5HIGHNVD
EPSS
27.7%
top 3.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Gnome GdkpixbufGnome GTK
Timeline
PublishedOct 20
Latest updateApr 29

Description

Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a certain color string. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0688).

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶NVDgnome/gdkpixbuf4 versions+3
▶NVDgnome/gtk5 versions+4

Patches

Patch: www.redhat.com ↗Patch: www.redhat.com ↗Patch: www.redhat.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-p8cv-98wp-jmgh: Stack-based buffer overflow in xpm_extract_color (io-xpm↗2022-04-29
▶
OSV
CVE-2004-0783: Stack-based buffer overflow in xpm_extract_color (io-xpm↗2004-10-20
▶
CVEList
CVE-2004-0783: Stack-based buffer overflow in xpm_extract_color (io-xpm↗2004-09-17
▶

📋Vendor Advisories

2
Red Hat
security flaw↗2004-09-15
▶
Debian
CVE-2004-0783: gtk+2.0 - Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image dec...↗2004
▶

💬Community

1
Bugzilla
CVE-2004-0783 security flaw↗2018-08-16
▶
CVE-2004-0783 — Out-of-bounds Write in Gnome Gdkpixbuf | cvebase