CVE Vulnerabilities

CVE-2004-0914

Published: Jan 10, 2005 | Modified: Oct 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVEs content decisions.

Affected Software

Name Vendor Start Version End Version
Lesstif Lesstif 0.93 0.93
Lesstif Lesstif 0.93.12 0.93.12
Lesstif Lesstif 0.93.18 0.93.18
Lesstif Lesstif 0.93.34 0.93.34
Lesstif Lesstif 0.93.36 0.93.36
Lesstif Lesstif 0.93.40 0.93.40
Lesstif Lesstif 0.93.91 0.93.91
Lesstif Lesstif 0.93.94 0.93.94
Lesstif Lesstif 0.93.96 0.93.96
X11r6 X.org 6.7.0 6.7.0
X11r6 X.org 6.8 6.8
X11r6 X.org 6.8.1 6.8.1
X11r6 Xfree86_project 3.3 3.3
X11r6 Xfree86_project 3.3.2 3.3.2
X11r6 Xfree86_project 3.3.3 3.3.3
X11r6 Xfree86_project 3.3.4 3.3.4
X11r6 Xfree86_project 3.3.5 3.3.5
X11r6 Xfree86_project 3.3.6 3.3.6
X11r6 Xfree86_project 4.0 4.0
X11r6 Xfree86_project 4.0.1 4.0.1
X11r6 Xfree86_project 4.0.2.11 4.0.2.11
X11r6 Xfree86_project 4.0.3 4.0.3
X11r6 Xfree86_project 4.1.0 4.1.0
X11r6 Xfree86_project 4.1.11 4.1.11
X11r6 Xfree86_project 4.1.12 4.1.12
X11r6 Xfree86_project 4.2.0 4.2.0
X11r6 Xfree86_project 4.2.1 4.2.1
X11r6 Xfree86_project 4.2.1 4.2.1
X11r6 Xfree86_project 4.3.0 4.3.0
Red Hat Enterprise Linux 2.1 RedHat XFree86 *
Red Hat Enterprise Linux 2.1 RedHat lesstif *
Red Hat Enterprise Linux 3 RedHat openmotif-0:2.2.3-4.RHEL3.4 *
Red Hat Enterprise Linux 3 RedHat openmotif21-0:2.1.30-9.RHEL3.4 *
Red Hat Enterprise Linux 3 RedHat XFree86-0:4.3.0-78.EL *
Red Hat Network Satellite Server v 4.2 RedHat jabberd-0:2.0s10-3.38.rhn *
Red Hat Network Satellite Server v 4.2 RedHat java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4 *
Red Hat Network Satellite Server v 4.2 RedHat jfreechart-0:0.9.20-3.rhn *
Red Hat Network Satellite Server v 4.2 RedHat openmotif21-0:2.1.30-11.RHEL4.6 *
Red Hat Network Satellite Server v 4.2 RedHat perl-Crypt-CBC-0:2.24-1.el4 *
Red Hat Network Satellite Server v 4.2 RedHat rhn-apache-0:1.3.27-36.rhn.rhel4 *
Red Hat Network Satellite Server v 4.2 RedHat rhn-modjk-0:1.2.23-2rhn.rhel4 *
Red Hat Network Satellite Server v 4.2 RedHat rhn-modperl-0:1.29-16.rhel4 *
Red Hat Network Satellite Server v 4.2 RedHat rhn-modssl-0:2.8.12-8.rhn.10.rhel4 *
Red Hat Network Satellite Server v 4.2 RedHat tomcat5-0:5.0.30-0jpp_10rh *
Red Hat Network Satellite Server v 4.2 (RHEL3) RedHat jabberd-0:2.0s10-3.37.rhn *
Red Hat Network Satellite Server v 4.2 (RHEL3) RedHat java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3 *
Red Hat Network Satellite Server v 4.2 (RHEL3) RedHat jfreechart-0:0.9.20-3.rhn *
Red Hat Network Satellite Server v 4.2 (RHEL3) RedHat openmotif21-0:2.1.30-9.RHEL3.8 *
Red Hat Network Satellite Server v 4.2 (RHEL3) RedHat perl-Crypt-CBC-0:2.24-1.el3 *
Red Hat Network Satellite Server v 4.2 (RHEL3) RedHat rhn-apache-0:1.3.27-36.rhn.rhel3 *
Red Hat Network Satellite Server v 4.2 (RHEL3) RedHat rhn-modjk-0:1.2.23-2rhn.rhel3 *
Red Hat Network Satellite Server v 4.2 (RHEL3) RedHat rhn-modperl-0:1.29-16.rhel3 *
Red Hat Network Satellite Server v 4.2 (RHEL3) RedHat rhn-modssl-0:2.8.12-8.rhn.10.rhel3 *
Red Hat Network Satellite Server v 4.2 (RHEL3) RedHat tomcat5-0:5.0.30-0jpp_10rh *
Lesstif1-1 Ubuntu dapper *
Lesstif1-1 Ubuntu edgy *
Lesstif2 Ubuntu dapper *
Lesstif2 Ubuntu devel *
Lesstif2 Ubuntu edgy *
Lesstif2 Ubuntu feisty *
Openmotif Ubuntu dapper *
Openmotif Ubuntu devel *
Openmotif Ubuntu edgy *
Openmotif Ubuntu feisty *

References