CVE-2005-0605: Altlinux Alt Linux

High severity, CVSS 7.5. EPSS: 4.5% chance of exploitation in the next 30 days.

scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.

Affected products

• Altlinux Alt Linux: version 2.3 only
• Lesstif Lesstif: version 0.93.94 only
• Mandrakesoft Mandrake Linux: version 10.0 only; version 10.1 only; version 10.2 only
• Mandrakesoft Mandrake Linux Corporate Server: version 2.1 only; version 3.0 only
• Red Hat Enterprise Linux: version 3.0 only; version 4.0 only
• Red Hat Enterprise Linux Desktop: version 3.0 only; version 4.0 only
• Red Hat Fedora Core: version core_2.0 only; version core_3.0 only
• Sgi Propack: version 3.0 only
• Suse Suse Linux: version 6.1 only; version 6.2 only; version 6.3 only; version 6.4 only; version 7.0 only; version 7.1 only; …
• X.org x11r6: version 6.7.0 only; version 6.8 only; version 6.8.1 only
• XFREE86 Project x11r6: version 3.3 only; version 3.3.2 only; version 3.3.3 only; version 3.3.4 only; version 3.3.5 only; version 3.3.6 only; …

Published 2005-03-02. Last modified 2026-06-16.