CVE-2004-0783

Name: CVE-2004-0783
Creator: NVD / NIST
Published: 2004-10-20T04:00:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 9.43%

Last modified Jun 16, 2026

CVE-2004-0783 is a vulnerability of currently unknown severity. Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a certain color string. NOTE: this identifier is ONLY for gtk+. EPSS estimates a 9.43% chance of exploitation in the next 30 days.

Description

Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a certain color string. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0688).

Metrics

EPSS Probability

9.43%

94.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-787

Affected Software

Vendor	Product	Versions
Gnome	Gdkpixbuf	0.17
Gnome	Gdkpixbuf	0.18
Gnome	Gdkpixbuf	0.20
Gnome	Gdkpixbuf	0.22
Gnome	Gtk	2.0.2
Gnome	Gtk	2.0.6
Gnome	Gtk	2.2.1
Gnome	Gtk	2.2.3
Gnome	Gtk	2.2.4

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875Third Party Advisory
http://marc.info/?l=bugtraq&m=109528994916275&w=2Third Party Advisory
http://scary.beasts.org/security/CESA-2004-005.txtThird Party Advisory
http://secunia.com/advisories/17657Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101776-1Third Party Advisory
http://www.kb.cert.org/vuls/id/369358Third Party Advisory, US Government Resource
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095Third Party Advisory
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:214Broken Link
http://www.redhat.com/support/errata/RHSA-2004-447.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-466.htmlPatch, Vendor Advisory
http://www.securityfocus.com/archive/1/419771/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/11195Third Party Advisory, VDB Entry
https://bugzilla.fedora.us/show_bug.cgi?id=2005Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/17385Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1786Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9348Broken Link
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875Third Party Advisory
http://marc.info/?l=bugtraq&m=109528994916275&w=2Third Party Advisory
http://scary.beasts.org/security/CESA-2004-005.txtThird Party Advisory
http://secunia.com/advisories/17657Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101776-1Third Party Advisory
http://www.kb.cert.org/vuls/id/369358Third Party Advisory, US Government Resource
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095Third Party Advisory
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:214Broken Link
http://www.redhat.com/support/errata/RHSA-2004-447.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-466.htmlPatch, Vendor Advisory
http://www.securityfocus.com/archive/1/419771/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/11195Third Party Advisory, VDB Entry
https://bugzilla.fedora.us/show_bug.cgi?id=2005Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/17385Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1786Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9348Broken Link

Timeline

Published: Oct 20, 2004
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2004-0783?

How severe is CVE-2004-0783?

Severity scoring for CVE-2004-0783 is pending analysis. The EPSS model estimates a 9.43% probability of exploitation in the next 30 days.

How do I fix CVE-2004-0783?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2004-0783?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST