Integer Overflow Vulnerabilities in libXpm

CVE-2004-0688 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.

Learn more about our Web Application Penetration Testing UK.