CVE-2004-0782

Publication date 20 October 2004

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain n_col and cpp values that enable a heap-based buffer overflow. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0687).

Status

Package Ubuntu Release Status
gdk-pixbuf 7.04 feisty
Fixed 0.22.0-11
6.10 edgy
Fixed 0.22.0-11
6.06 LTS dapper
Fixed 0.22.0-11
gtk+2.0 7.04 feisty
Fixed 2.10.11-0ubuntu3
6.10 edgy
Fixed 2.10.6-0ubuntu3.1
6.06 LTS dapper
Fixed 2.8.20-0ubuntu1.1