Description
scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.
Published: 2005-03-04
Score: 7.5 High
EPSS: 2.8% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2005-0606 scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.
Ubuntu USN Ubuntu USN USN-92-1 LessTif vulnerabilities
Ubuntu USN Ubuntu USN USN-97-1 libxpm vulnerability
References
Link Providers
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.5/SCOSA-2006.5.txt cve-icon cve-icon
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.57/SCOSA-2005.57.txt cve-icon cve-icon
ftp://patches.sgi.com/support/free/security/advisories/20060403-01-U cve-icon cve-icon
http://bugs.gentoo.org/show_bug.cgi?id=83598 cve-icon cve-icon
http://bugs.gentoo.org/show_bug.cgi?id=83655 cve-icon cve-icon
http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html cve-icon cve-icon
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html cve-icon cve-icon
http://secunia.com/advisories/14460 cve-icon cve-icon
http://secunia.com/advisories/18049 cve-icon cve-icon
http://secunia.com/advisories/18316 cve-icon cve-icon
http://secunia.com/advisories/19624 cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200503-08.xml cve-icon cve-icon
http://securitytracker.com/id?1013339 cve-icon cve-icon
http://www.debian.org/security/2005/dsa-723 cve-icon cve-icon
http://www.gentoo.org/security/en/glsa/glsa-200503-15.xml cve-icon cve-icon
http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2005-044.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2005-198.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2005-331.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2005-412.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2005-473.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0261.html cve-icon cve-icon
http://www.securityfocus.com/bid/12714 cve-icon cve-icon
https://bugs.freedesktop.org/attachment.cgi?id=1909 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2005-0605 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10411 cve-icon cve-icon
https://usn.ubuntu.com/92-1/ cve-icon cve-icon
https://usn.ubuntu.com/97-1/ cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2005-0605 cve-icon
History

No history.

Subscriptions

Altlinux Alt Linux
Lesstif Lesstif
Mandrakesoft Mandrake Linux Mandrake Linux Corporate Server
Redhat Enterprise Linux Enterprise Linux Desktop Fedora Core Network Satellite
Sgi Propack
Suse Suse Linux
X.org X11r6
Xfree86 Project X11r6
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-07T21:21:06.249Z

Reserved: 2005-03-01T00:00:00.000Z

Link: CVE-2005-0605

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2005-03-02T05:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2005-0605

cve-icon Redhat

Severity : Moderate

Publid Date: 2005-03-01T00:00:00Z

Links: CVE-2005-0605 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses