CVE-2004-0783

no score yetEPSS 9.4%

Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a certain color string. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0688).

EPSS: 9.4% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2004-10-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

gnome:gdkpixbuf
gnome:gtk

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875
http://marc.info/?l=bugtraq&m=109528994916275&w=2
http://scary.beasts.org/security/CESA-2004-005.txt
http://secunia.com/advisories/17657
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101776-1

Check your stack JSON