CVE-2004-0914
Description
Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE's content decisions.
No summary for this CVE yet.
CVSS Vector Breakdown
Exploitability
AV:NAccess VectorNetwork
AC:LAccess ComplexityLow
Au:NAuthenticationNone
Impact
C:CConfidentialityComplete
I:CIntegrityComplete
A:CAvailabilityComplete
Weaknesses
Affected Products
lesstif
oss-project
x.org
oss-project·US
xfree86 project
oss-projectaka xfree86 x, x11r6, xfree86
gentoo
oss-project·USaka gentoo linux
redhat
commercial·USaka red hat
suse
commercial·DE
and 1 more affected products View all →
Exploitability
Official Patch Available
References
http://www.redhat.com/support/errata/RHSA-2005-004.html
redhat.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/18146
exchange.xforce.ibmcloud.com
http://www.ubuntu.com/usn/usn-83-1
ubuntu.com
and 19 more references View all →
Unlock Complete Vulnerability Intelligence
Get the full picture for CVE-2004-0914 and every CVE in our database. Create a free account — no credit card required.
Create Free AccountPlain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows