CVE-2004-0782

CVE-2004-0782 describes an integer overflow vulnerability in the XPM image decoder within gtk+ 2.4.4 and earlier, and gdk-pixbuf before 0.22. This flaw, specifically in the pixbuf_create_from_xpm function, allows remote attackers to execute arbitrary code through a heap-based buffer overflow by manipulating n_col and cpp values. With a CVSS score of 7.5, it is considered highly severe, indicating a network-based attack with low complexity and potential for partial compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.