PT-2004-3766 · Gtk++1 · Gdk-Pixbuf+2

CVE-2004-0783

·

Publicado

1970-01-01

·

Atualizado

2023-08-11

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions gtk2 versions prior to 2.4.4 gdk-pixbuf versions prior to 0.22
Description The issue affects the gtk2 and gdk-pixbuf packages in the openSUSE operating system, allowing remote exploitation that may lead to a breach of confidentiality, integrity, and availability of protected information. A stack-based buffer overflow in the XPM image decoder may allow remote attackers to execute arbitrary code via a certain color string.
Recommendations For gtk2 versions prior to 2.4.4, update to a version later than 2.4.4 to resolve the issue. For gdk-pixbuf versions prior to 0.22, update to a version later than 0.22 to resolve the issue. As a temporary workaround, consider restricting the use of the XPM image decoder in the affected packages until a patch is available.

Correção

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2015-04801
BDU:2015-04802
CVE-2004-0783
DSA-549-1
RHSA-2004:447
RHSA-2004:466

Produtos afetados

Gdk-Pixbuf
Gtk2
Opensuse