CVE-2005-0605
NONE EPSS 90.4%
Published Mar 2, 200521y ago · Modified Jun 16, 20262w ago
Published Mar 2, 2005 21y ago
Last Modified Jun 16, 2026 2w ago
Description
scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.
Threat Intelligence
EPSS Exploit Probability
90.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Affected Products 82
| Vendor | Product | Version | Range |
|---|---|---|---|
| lesstif | lesstif | 0.93.94 | any |
| sgi | propack | 3.0 | any |
| x.org | x11r6 | 6.7.0 | any |
| x.org | x11r6 | 6.8 | any |
| x.org | x11r6 | 6.8.1 | any |
| xfree86_project | x11r6 | 3.3 | any |
| xfree86_project | x11r6 | 3.3.2 | any |
| xfree86_project | x11r6 | 3.3.3 | any |
| xfree86_project | x11r6 | 3.3.4 | any |
| xfree86_project | x11r6 | 3.3.5 | any |
| xfree86_project | x11r6 | 3.3.6 | any |
| xfree86_project | x11r6 | 4.0 | any |
| xfree86_project | x11r6 | 4.0.1 | any |
| xfree86_project | x11r6 | 4.0.2.11 | any |
| xfree86_project | x11r6 | 4.0.3 | any |
| xfree86_project | x11r6 | 4.1.0 | any |
| xfree86_project | x11r6 | 4.1.11 | any |
| xfree86_project | x11r6 | 4.1.12 | any |
| xfree86_project | x11r6 | 4.2.0 | any |
| xfree86_project | x11r6 | 4.2.1 | any |
| xfree86_project | x11r6 | 4.2.1 | any |
| xfree86_project | x11r6 | 4.3.0 | any |
| xfree86_project | x11r6 | 4.3.0.1 | any |
| xfree86_project | x11r6 | 4.3.0.2 | any |
| altlinux | alt_linux | 2.3 | any |
| altlinux | alt_linux | 2.3 | any |
| mandrakesoft | mandrake_linux | 10.0 | any |
| mandrakesoft | mandrake_linux | 10.0 | any |
| mandrakesoft | mandrake_linux | 10.1 | any |
| mandrakesoft | mandrake_linux | 10.1 | any |
| mandrakesoft | mandrake_linux | 10.2 | any |
| mandrakesoft | mandrake_linux | 10.2 | any |
| mandrakesoft | mandrake_linux_corporate_server | 2.1 | any |
| mandrakesoft | mandrake_linux_corporate_server | 2.1 | any |
| mandrakesoft | mandrake_linux_corporate_server | 3.0 | any |
| mandrakesoft | mandrake_linux_corporate_server | 3.0 | any |
| redhat | enterprise_linux | 3.0 | any |
| redhat | enterprise_linux | 3.0 | any |
| redhat | enterprise_linux | 3.0 | any |
| redhat | enterprise_linux | 4.0 | any |
| redhat | enterprise_linux | 4.0 | any |
| redhat | enterprise_linux | 4.0 | any |
| redhat | enterprise_linux_desktop | 3.0 | any |
| redhat | enterprise_linux_desktop | 4.0 | any |
| redhat | fedora_core | core_2.0 | any |
| redhat | fedora_core | core_3.0 | any |
| suse | suse_linux | 6.1 | any |
| suse | suse_linux | 6.1 | any |
| suse | suse_linux | 6.2 | any |
| suse | suse_linux | 6.3 | any |
| suse | suse_linux | 6.3 | any |
| suse | suse_linux | 6.3 | any |
| suse | suse_linux | 6.4 | any |
| suse | suse_linux | 6.4 | any |
| suse | suse_linux | 6.4 | any |
| suse | suse_linux | 6.4 | any |
| suse | suse_linux | 7.0 | any |
| suse | suse_linux | 7.0 | any |
| suse | suse_linux | 7.0 | any |
| suse | suse_linux | 7.0 | any |
| suse | suse_linux | 7.0 | any |
| suse | suse_linux | 7.1 | any |
| suse | suse_linux | 7.1 | any |
| suse | suse_linux | 7.1 | any |
| suse | suse_linux | 7.1 | any |
| suse | suse_linux | 7.1 | any |
| suse | suse_linux | 7.2 | any |
| suse | suse_linux | 7.2 | any |
| suse | suse_linux | 7.3 | any |
| suse | suse_linux | 7.3 | any |
| suse | suse_linux | 7.3 | any |
| suse | suse_linux | 7.3 | any |
| suse | suse_linux | 8.0 | any |
| suse | suse_linux | 8.0 | any |
| suse | suse_linux | 8.1 | any |
| suse | suse_linux | 8.2 | any |
| suse | suse_linux | 9.0 | any |
| suse | suse_linux | 9.0 | any |
| suse | suse_linux | 9.1 | any |
| suse | suse_linux | 9.1 | any |
| suse | suse_linux | 9.2 | any |
| suse | suse_linux | 9.2 | any |
References 27
- ftp.sco.com ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.5/SCOSA-2006.5.txt
- ftp.sco.com ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.57/SCOSA-2005.57.txt
- patches.sgi.com ftp://patches.sgi.com/support/free/security/advisories/20060403-01-U
- bugs.gentoo.org http://bugs.gentoo.org/show_bug.cgi?id=83598
- bugs.gentoo.org http://bugs.gentoo.org/show_bug.cgi?id=83655
- lists.apple.com http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
- lists.apple.com http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
- secunia.com http://secunia.com/advisories/14460
- secunia.com http://secunia.com/advisories/18049
- secunia.com http://secunia.com/advisories/18316
- secunia.com http://secunia.com/advisories/19624
- security.gentoo.org http://security.gentoo.org/glsa/glsa-200503-08.xml
- securitytracker.com http://securitytracker.com/id?1013339
- debian.org http://www.debian.org/security/2005/dsa-723
- gentoo.org http://www.gentoo.org/security/en/glsa/glsa-200503-15.xml
- redhat.com http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html
- redhat.com http://www.redhat.com/support/errata/RHSA-2005-044.html
- redhat.com http://www.redhat.com/support/errata/RHSA-2005-198.html
- redhat.com http://www.redhat.com/support/errata/RHSA-2005-331.html
- redhat.com http://www.redhat.com/support/errata/RHSA-2005-412.html
- redhat.com http://www.redhat.com/support/errata/RHSA-2005-473.html
- redhat.com http://www.redhat.com/support/errata/RHSA-2008-0261.html
- securityfocus.com http://www.securityfocus.com/bid/12714
- bugs.freedesktop.org https://bugs.freedesktop.org/attachment.cgi?id=1909
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10411
- usn.ubuntu.com https://usn.ubuntu.com/92-1/
- usn.ubuntu.com https://usn.ubuntu.com/97-1/
Remediation
- bugs.gentoo.org http://bugs.gentoo.org/show_bug.cgi?id=83598
- bugs.gentoo.org http://bugs.gentoo.org/show_bug.cgi?id=83655
- security.gentoo.org http://security.gentoo.org/glsa/glsa-200503-08.xml
- securitytracker.com http://securitytracker.com/id?1013339
- debian.org http://www.debian.org/security/2005/dsa-723
- gentoo.org http://www.gentoo.org/security/en/glsa/glsa-200503-15.xml
- redhat.com http://www.redhat.com/support/errata/RHSA-2005-331.html
- securityfocus.com http://www.securityfocus.com/bid/12714