CVE-2004-0688 Integer overflow in n/a
Remote attackers can execute arbitrary code by tricking users into opening a malformed XPM image file due to integer overflows in libXpm.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2004-0688?
CVE-2004-0688 is a high-severity vulnerability in Openbsd Openbsd, published on 24 Sep 2004. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.
Which versions are affected by CVE-2004-0688?
It affects 4 products.
Products include Openbsd Openbsd, Suse Suse Linux, X.org X11r6, Xfree86 Project X11r6.
How do I fix CVE-2004-0688?
Upgrade to a fixed version.
Is CVE-2004-0688 being exploited?
There is no known exploitation of CVE-2004-0688 in the wild and no public exploit code.
Other vulnerabilities in Openbsd Openbsd
Sources
Also known as GHSA-qmhp-j7pr-584c.