Skip to content
OpenAdvisories
Unscored DSA-561-1 2 CVEs

xfree86 - integer and stack overflows

Published Oct 11, 2004 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 xfree86 4.1.0-16woody4

Vulnerabilities 2

  • Unscored —

    Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) Pars…

  • Unscored —

    Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXIm…