CVE-2004-0783 : Detail

CVE-2004-0783

Overflow
70.69%V3
Network
2004-09-17
02h00 +00:00
2018-10-19
12h57 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a certain color string. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0688).

CVE Informations

Related Weaknesses

CWE-ID Weakness Name Source
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

Metrics

Metrics Score Severity CVSS Vector Source
V2 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Products Mentioned

Configuraton 0

Gnome>>Gdkpixbuf >> Version 0.17

Gnome>>Gdkpixbuf >> Version 0.18

Gnome>>Gdkpixbuf >> Version 0.20

Gnome>>Gdkpixbuf >> Version 0.22

Gnome>>Gtk >> Version 2.0.2

Gnome>>Gtk >> Version 2.0.6

Gnome>>Gtk >> Version 2.2.1

Gnome>>Gtk >> Version 2.2.3

Gnome>>Gtk >> Version 2.2.4

References

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101776-1
Tags : vendor-advisory, x_refsource_SUNALERT
https://bugzilla.fedora.us/show_bug.cgi?id=2005
Tags : vendor-advisory, x_refsource_FEDORA
http://www.redhat.com/support/errata/RHSA-2004-466.html
Tags : vendor-advisory, x_refsource_REDHAT
http://marc.info/?l=bugtraq&m=109528994916275&w=2
Tags : mailing-list, x_refsource_BUGTRAQ
http://www.kb.cert.org/vuls/id/369358
Tags : third-party-advisory, x_refsource_CERT-VN
http://www.mandriva.com/security/advisories?name=MDKSA-2005:214
Tags : vendor-advisory, x_refsource_MANDRIVA
http://www.securityfocus.com/archive/1/419771/100/0/threaded
Tags : vendor-advisory, x_refsource_FEDORA
http://www.securityfocus.com/bid/11195
Tags : vdb-entry, x_refsource_BID
http://www.redhat.com/support/errata/RHSA-2004-447.html
Tags : vendor-advisory, x_refsource_REDHAT
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875
Tags : vendor-advisory, x_refsource_CONECTIVA
http://secunia.com/advisories/17657
Tags : third-party-advisory, x_refsource_SECUNIA