CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-0914

Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE's content decisions.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 72.7%

CVSS Severity

CVSS v2 Score 10.0

References

Products affected by CVE-2004-0914

Lesstif » Lesstif » Version: 0.93

cpe:2.3:a:lesstif:lesstif:0.93
Lesstif » Lesstif » Version: 0.93.12

cpe:2.3:a:lesstif:lesstif:0.93.12
Lesstif » Lesstif » Version: 0.93.18

cpe:2.3:a:lesstif:lesstif:0.93.18
Lesstif » Lesstif » Version: 0.93.34

cpe:2.3:a:lesstif:lesstif:0.93.34
Lesstif » Lesstif » Version: 0.93.36

cpe:2.3:a:lesstif:lesstif:0.93.36
Lesstif » Lesstif » Version: 0.93.40

cpe:2.3:a:lesstif:lesstif:0.93.40
Lesstif » Lesstif » Version: 0.93.91

cpe:2.3:a:lesstif:lesstif:0.93.91
Lesstif » Lesstif » Version: 0.93.94

cpe:2.3:a:lesstif:lesstif:0.93.94
Lesstif » Lesstif » Version: 0.93.96

cpe:2.3:a:lesstif:lesstif:0.93.96
X.org » X11r6 » Version: 6.7.0

cpe:2.3:a:x.org:x11r6:6.7.0
X.org » X11r6 » Version: 6.8

cpe:2.3:a:x.org:x11r6:6.8
X.org » X11r6 » Version: 6.8.1

cpe:2.3:a:x.org:x11r6:6.8.1
Xfree86 Project » X11r6 » Version: 3.3

cpe:2.3:a:xfree86_project:x11r6:3.3
Xfree86 Project » X11r6 » Version: 3.3.2

cpe:2.3:a:xfree86_project:x11r6:3.3.2
Xfree86 Project » X11r6 » Version: 3.3.3

cpe:2.3:a:xfree86_project:x11r6:3.3.3
Xfree86 Project » X11r6 » Version: 3.3.4

cpe:2.3:a:xfree86_project:x11r6:3.3.4
Xfree86 Project » X11r6 » Version: 3.3.5

cpe:2.3:a:xfree86_project:x11r6:3.3.5
Xfree86 Project » X11r6 » Version: 3.3.6

cpe:2.3:a:xfree86_project:x11r6:3.3.6
Xfree86 Project » X11r6 » Version: 4.0

cpe:2.3:a:xfree86_project:x11r6:4.0
Xfree86 Project » X11r6 » Version: 4.0.1

cpe:2.3:a:xfree86_project:x11r6:4.0.1
Xfree86 Project » X11r6 » Version: 4.0.2.11

cpe:2.3:a:xfree86_project:x11r6:4.0.2.11
Xfree86 Project » X11r6 » Version: 4.0.3

cpe:2.3:a:xfree86_project:x11r6:4.0.3
Xfree86 Project » X11r6 » Version: 4.1.0

cpe:2.3:a:xfree86_project:x11r6:4.1.0
Xfree86 Project » X11r6 » Version: 4.1.11

cpe:2.3:a:xfree86_project:x11r6:4.1.11
Xfree86 Project » X11r6 » Version: 4.1.12

cpe:2.3:a:xfree86_project:x11r6:4.1.12
Xfree86 Project » X11r6 » Version: 4.2.0

cpe:2.3:a:xfree86_project:x11r6:4.2.0
Xfree86 Project » X11r6 » Version: 4.2.1

cpe:2.3:a:xfree86_project:x11r6:4.2.1
Xfree86 Project » X11r6 » Version: 4.3.0

cpe:2.3:a:xfree86_project:x11r6:4.3.0
Gentoo » Linux » Version: N/A

cpe:2.3:o:gentoo:linux:-
Gentoo » Linux » Version: 1.2

cpe:2.3:o:gentoo:linux:1.2
Gentoo » Linux » Version: 1.4

cpe:2.3:o:gentoo:linux:1.4
Gentoo » Linux » Version: 2.1.30

cpe:2.3:o:gentoo:linux:2.1.30
Gentoo » Linux » Version: 2.2.28

cpe:2.3:o:gentoo:linux:2.2.28
Gentoo » Linux » Version: 2.3.30

cpe:2.3:o:gentoo:linux:2.3.30
Redhat » Fedora Core » Version: core_2.0

cpe:2.3:o:redhat:fedora_core:core_2.0
Redhat » Fedora Core » Version: core_3.0

cpe:2.3:o:redhat:fedora_core:core_3.0
Suse » Suse Linux » Version: 1.0

cpe:2.3:o:suse:suse_linux:1.0
Suse » Suse Linux » Version: 8

cpe:2.3:o:suse:suse_linux:8
Suse » Suse Linux » Version: 8.1

cpe:2.3:o:suse:suse_linux:8.1
Suse » Suse Linux » Version: 8.2

cpe:2.3:o:suse:suse_linux:8.2
Suse » Suse Linux » Version: 9.0

cpe:2.3:o:suse:suse_linux:9.0
Suse » Suse Linux » Version: 9.1

cpe:2.3:o:suse:suse_linux:9.1
Suse » Suse Linux » Version: 9.2

cpe:2.3:o:suse:suse_linux:9.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-0914

Products

Pricing

Contact Us