CVE-2005-0891: Buffer Overflow
Published Apr 1, 2005
·Updated
Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image.
Affected Software
5 affected components
Gnome GTK>=2.0.0<2.2.4
GTK Gtk\+=2.2.3
GTK Gtk\+=2.0.2
GTK Gtk\+=2.0.6
GTK Gtk\+=2.2.1
Remediation
Patch Available
Event History
Apr 1, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0891?
CVE-2005-0891 is classified as a high severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2005-0891?
To fix CVE-2005-0891, upgrade GTK to version 2.2.4 or higher.
3
What software is affected by CVE-2005-0891?
CVE-2005-0891 affects GTK versions prior to 2.2.4, including GTK+ versions 2.0.2, 2.0.6, 2.2.1, and 2.2.3.
4
What kind of attack exploits CVE-2005-0891?
CVE-2005-0891 can be exploited by remote attackers using a crafted BMP image to trigger a crash.
5
Is CVE-2005-0891 still relevant for current systems?
CVE-2005-0891 is less relevant for current systems, but it remains important for legacy systems still using affected GTK versions.