CVE-2004-0782

Name: CVE-2004-0782
Creator: NVD / NIST
Published: 2004-10-20T04:00:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 9.18%

Last modified Jun 16, 2026

CVE-2004-0782 is a vulnerability of currently unknown severity. Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain n_col and cpp values that enable a heap-based buffer overflow. NOTE: this identifier is ONLY for gtk+. EPSS estimates a 9.18% chance of exploitation in the next 30 days.

Description

Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain n_col and cpp values that enable a heap-based buffer overflow. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0687).

Metrics

EPSS Probability

9.18%

94.7th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Gnome	Gdkpixbuf	0.17
Gnome	Gdkpixbuf	0.18
Gnome	Gdkpixbuf	0.20
Gnome	Gdkpixbuf	0.22
Gnome	Gtk	2.0.2
Gnome	Gtk	2.0.6
Gnome	Gtk	2.2.1
Gnome	Gtk	2.2.3
Gnome	Gtk	2.2.4

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875Third Party Advisory
http://marc.info/?l=bugtraq&m=109528994916275&w=2Third Party Advisory
http://scary.beasts.org/security/CESA-2004-005.txtThird Party Advisory
http://secunia.com/advisories/17657Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101776-1Third Party Advisory
http://www.debian.org/security/2004/dsa-546Third Party Advisory
http://www.kb.cert.org/vuls/id/729894Third Party Advisory, US Government Resource
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:214Broken Link
http://www.redhat.com/support/errata/RHSA-2004-447.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-466.htmlPatch, Vendor Advisory
http://www.securityfocus.com/archive/1/419771/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/11195Third Party Advisory, VDB Entry
https://bugzilla.fedora.us/show_bug.cgi?id=2005Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/17386Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11539Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1617Broken Link
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875Third Party Advisory
http://marc.info/?l=bugtraq&m=109528994916275&w=2Third Party Advisory
http://scary.beasts.org/security/CESA-2004-005.txtThird Party Advisory
http://secunia.com/advisories/17657Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101776-1Third Party Advisory
http://www.debian.org/security/2004/dsa-546Third Party Advisory
http://www.kb.cert.org/vuls/id/729894Third Party Advisory, US Government Resource
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:214Broken Link
http://www.redhat.com/support/errata/RHSA-2004-447.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-466.htmlPatch, Vendor Advisory
http://www.securityfocus.com/archive/1/419771/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/11195Third Party Advisory, VDB Entry
https://bugzilla.fedora.us/show_bug.cgi?id=2005Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/17386Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11539Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1617Broken Link

Timeline

Published: Oct 20, 2004
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2004-0782?

How severe is CVE-2004-0782?

Severity scoring for CVE-2004-0782 is pending analysis. The EPSS model estimates a 9.18% probability of exploitation in the next 30 days.

How do I fix CVE-2004-0782?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2004-0782?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST