RHSA-2005%3A004 — Vulnetix

RHSA-2005%3A004 PUBLISHED CVSS 9.300000190734863 CRITICAL

Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file.

Risk Scores

CVSS 4.0

9.300000190734863

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
Red Hat	Red Hat Linux Advanced Workstation 2.1
Red Hat	Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat	Red Hat Enterprise Linux ES version 2.1
Red Hat	Red Hat Enterprise Linux WS version 2.1

Timeline

Jan 12, 2005 CVE Published
Nov 21, 2025 CVE Updated
Apr 24, 2026 Distribution Patch
Apr 24, 2026 Distribution Patch
Apr 24, 2026 Security Advisory
Apr 24, 2026 Security Advisory
Apr 24, 2026 Security Advisory
Apr 24, 2026 Security Advisory

References

https://access.redhat.com/errata/RHSA-2005:004 advisory
https://access.redhat.com/security/updates/classification/#moderate advisory
https://bugzilla.redhat.com/show_bug.cgi?id=135076 issue
https://bugzilla.redhat.com/show_bug.cgi?id=135079 issue
https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_004.json advisory
https://access.redhat.com/security/cve/CVE-2004-0687 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=430513 issue
https://www.cve.org/CVERecord?id=CVE-2004-0687 advisory
https://nvd.nist.gov/vuln/detail/CVE-2004-0687 advisory
https://access.redhat.com/security/cve/CVE-2004-0688 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=430515 issue
https://www.cve.org/CVERecord?id=CVE-2004-0688 advisory
https://nvd.nist.gov/vuln/detail/CVE-2004-0688 advisory
https://access.redhat.com/security/cve/CVE-2004-0914 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=430516 issue
https://www.cve.org/CVERecord?id=CVE-2004-0914 advisory
https://nvd.nist.gov/vuln/detail/CVE-2004-0914 advisory

Open in Interactive Console →