Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-0914
HistoryJan 10, 2005 - 5:00 a.m.

CVE-2004-0914

2005-01-1005:00:00
[email protected]
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.088 Low

EPSS

Percentile

94.6%

JSON

Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE’s content decisions.

Affected configurations

NVD
Node
lesstiflesstifMatch0.93
OR
lesstiflesstifMatch0.93.12
OR
lesstiflesstifMatch0.93.18
OR
lesstiflesstifMatch0.93.34
OR
lesstiflesstifMatch0.93.36
OR
lesstiflesstifMatch0.93.40
OR
lesstiflesstifMatch0.93.91
OR
lesstiflesstifMatch0.93.94
OR
lesstiflesstifMatch0.93.96
OR
x.orgx11r6Match6.7.0
OR
x.orgx11r6Match6.8
OR
x.orgx11r6Match6.8.1
OR
xfree86_projectx11r6Match3.3
OR
xfree86_projectx11r6Match3.3.2
OR
xfree86_projectx11r6Match3.3.3
OR
xfree86_projectx11r6Match3.3.4
OR
xfree86_projectx11r6Match3.3.5
OR
xfree86_projectx11r6Match3.3.6
OR
xfree86_projectx11r6Match4.0
OR
xfree86_projectx11r6Match4.0.1
OR
xfree86_projectx11r6Match4.0.2.11
OR
xfree86_projectx11r6Match4.0.3
OR
xfree86_projectx11r6Match4.1.0
OR
xfree86_projectx11r6Match4.1.11
OR
xfree86_projectx11r6Match4.1.12
OR
xfree86_projectx11r6Match4.2.0
OR
xfree86_projectx11r6Match4.2.1
OR
xfree86_projectx11r6Match4.2.1errata
OR
xfree86_projectx11r6Match4.3.0
Node
gentoolinux
OR
redhatfedora_coreMatchcore_2.0
OR
redhatfedora_coreMatchcore_3.0
OR
susesuse_linuxMatch1.0desktop
OR
susesuse_linuxMatch8enterprise_server
OR
susesuse_linuxMatch8.1
OR
susesuse_linuxMatch8.2
OR
susesuse_linuxMatch9.0
OR
susesuse_linuxMatch9.0enterprise_server
OR
susesuse_linuxMatch9.1
OR
susesuse_linuxMatch9.2

References

Related

cve 1
openvas 13
nessus 19
gentoo 3
ubuntucve 1
ubuntu 2
osv 2
securityvulns 1
debian 4
redhat 5
cvelist 1
freebsd 1
cve
cve
CVE-2004-0914
2005-01-10 05:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200502-06 (lesstif)
2008-09-24 00:00:00
Ubuntu: Security Advisory (USN-83-1)
2022-08-26 00:00:00
Debian Security Advisory DSA 607-1 (xfree86)
2008-01-17 00:00:00
nessus
nessus
RHEL 2.1 : XFree86 (RHSA-2004:610)
2004-12-20 00:00:00
SUSE-SA:2004:041: xshared, XFree86-libs, xorg-x11-libs
2004-11-18 00:00:00
GLSA-200411-28 : X.Org, XFree86: libXpm vulnerabilities
2004-11-22 00:00:00
gentoo
gentoo
X.Org, XFree86: libXpm vulnerabilities
2004-11-19 00:00:00
LessTif: Multiple vulnerabilities in libXpm
2005-02-06 00:00:00
OpenMotif: Multiple vulnerabilities in libXpm
2005-02-07 00:00:00
ubuntucve
ubuntucve
CVE-2004-0914
2005-01-10 00:00:00
ubuntu
ubuntu
LessTif 2 vulnerabilities
2005-02-16 00:00:00
LessTif 1 vulnerabilities
2005-09-13 00:00:00
osv
osv
xfree86 - several
2004-12-10 00:00:00
xfree86 - integer overflow
2005-09-19 00:00:00
securityvulns
securityvulns
[Full-Disclosure] [USN-83-1] LessTif 2 vulnerabilities
2005-02-16 00:00:00
debian
debian
[SECURITY] [DSA 607-1] New libxpm packages fix several vulnerabilities
2004-12-10 11:50:24
[SECURITY] [DSA 816-1] New XFree86 packages fix arbitrary code execution
2005-09-22 08:57:47
[SECURITY] [DSA 607-1] New libxpm packages fix several vulnerabilities
2004-12-10 11:50:24
redhat
redhat
(RHSA-2004:610) XFree86 security update
2004-12-20 00:00:00
(RHSA-2004:612) XFree86 security update
2004-12-20 00:00:00
(RHSA-2004:537) openmotif security update
2004-12-02 00:00:00
cvelist
cvelist
CVE-2004-0914
2004-12-15 05:00:00
freebsd
freebsd
linux_base -- vulnerabilities in Red Hat 7.1 libraries
2004-09-27 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.088 Low

EPSS

Percentile

94.6%

JSON
Related for NVD:CVE-2004-0914
cve1openvas13nessus19gentoo3ubuntucve1ubuntu2osv2securityvulns1debian4redhat5cvelist1freebsd1