CVE-2004-0783

Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a certain color string. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0688).

• CWE-787

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875Third Party Advisory
• http://marc.info/?l=bugtraq&m=109528994916275&w=2Third Party Advisory
• http://scary.beasts.org/security/CESA-2004-005.txtThird Party Advisory
• http://secunia.com/advisories/17657Broken Link
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101776-1Third Party Advisory
• http://www.kb.cert.org/vuls/id/369358Third Party Advisory, US Government Resource
• http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095Third Party Advisory
• http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:214Broken Link
• http://www.redhat.com/support/errata/RHSA-2004-447.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2004-466.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/419771/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/11195Third Party Advisory, VDB Entry
• https://bugzilla.fedora.us/show_bug.cgi?id=2005Issue Tracking
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17385Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1786Broken Link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9348Broken Link
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875Third Party Advisory
• http://marc.info/?l=bugtraq&m=109528994916275&w=2Third Party Advisory
• http://scary.beasts.org/security/CESA-2004-005.txtThird Party Advisory
• http://secunia.com/advisories/17657Broken Link
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101776-1Third Party Advisory
• http://www.kb.cert.org/vuls/id/369358Third Party Advisory, US Government Resource
• http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095Third Party Advisory
• http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:214Broken Link
• http://www.redhat.com/support/errata/RHSA-2004-447.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2004-466.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/419771/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/11195Third Party Advisory, VDB Entry
• https://bugzilla.fedora.us/show_bug.cgi?id=2005Issue Tracking
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17385Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1786Broken Link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9348Broken Link

Published

Oct 20, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0777Format string vulnerability in the auth_debug function in Co…
• CVE-2004-0778CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows …
• CVE-2004-0779The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 we…
• CVE-2004-0780Buffer overflow in uustat in Sun Solaris 8 and 9 allows loca…
• CVE-2004-0781Cross-site scripting (XSS) vulnerability in list.cgi in the …
• CVE-2004-0782Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the…
• CVE-2004-0784The smiley theme functionality in Gaim before 0.82 allows re…
• CVE-2004-0785Multiple buffer overflows in Gaim before 0.82 allow remote a…
• CVE-2004-0786The IPv6 URI parsing routines in the apr-util library for Ap…
• CVE-2004-0787Cross-site scripting (XSS) vulnerability in the web frontend…
• CVE-2004-0788Integer overflow in the ICO image decoder for (1) gdk-pixbuf…
• CVE-2004-0789Multiple implementations of the DNS protocol, including (1) …