Integer Overflow in XPM Image Decoder for GTK and GDK-Pixbuf

CVE-2004-0782

Summary

An integer overflow vulnerability exists in the XPM image decoder of GTK+ (version 2.4.4 and earlier) and GDK-Pixbuf (before version 0.22). This flaw allows remote attackers to exploit certain values for 'n_col' and 'cpp', triggering a heap-based buffer overflow. Successful exploitation could allow the attacker to execute arbitrary code on the affected system. It is crucial for users of these products to apply security updates promptly to mitigate potential risks.

References