CVE-2005-2976: Integer Overflow
Published Nov 18, 2005
·Updated
Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 allows attackers to cause a denial of service (crash) or execute arbitrary code via an XPM file with large height, width, and colour values, a different vulnerability than CVE-2005-3186.
Affected Software
86 affected components
Gnome GdkPixbuf=0.22
Gnome GTK<2.8.7
GTK Gtk\+=2.7.4
GTK Gtk\+=2.4.9
GTK Gtk\+=1.2.1
GTK Gtk\+=1.2.6
GTK Gtk\+=1.3.9
GTK Gtk\+=1.2.9
GTK Gtk\+=2.2.3
GTK Gtk\+=2.4.7
GTK Gtk\+=2.7.3
GTK Gtk\+=1.2.10
GTK Gtk\+=1.2.2
GTK Gtk\+=2.5.3
GTK Gtk\+=1.2.4
GTK Gtk\+=2.5.0
GTK Gtk\+=2.4.2
GTK Gtk\+=2.4.3
GTK Gtk\+=2.7.5
GTK Gtk\+=2.8.5
GTK Gtk\+=2.6.9
GTK Gtk\+=1.3.12
GTK Gtk\+=1.2.7
GTK Gtk\+=2.2.0
GTK Gtk\+=1.2.8
GTK Gtk\+=2.6.8
GTK Gtk\+=2.6.6
GTK Gtk\+=2.3.2
GTK Gtk\+=2.5.5
GTK Gtk\+=2.6.5
GTK Gtk\+=2.1.3
GTK Gtk\+=1.3.13
GTK Gtk\+=2.8.2
GTK Gtk\+=2.5.2
GTK Gtk\+=2.4.14
GTK Gtk\+=2.3.5
GTK Gtk\+=2.1.0
GTK Gtk\+=2.6.0
GTK Gtk\+=2.4.8
GTK Gtk\+=2.3.6
GTK Gtk\+=2.5.4
GTK Gtk\+=1.2.5
GTK Gtk\+=2.6.2
GTK Gtk\+=2.6.3
GTK Gtk\+=2.4.11
GTK Gtk\+=2.6.10
GTK Gtk\+=2.7.0
GTK Gtk\+=2.8.0
GTK Gtk\+=2.4.0
GTK Gtk\+=1.3.10
GTK Gtk\+=1.1.15
GTK Gtk\+=2.1.4
GTK Gtk\+=2.3.0
GTK Gtk\+=2.2.4
GTK Gtk\+=2.4.1
GTK Gtk\+=2.4.6
GTK Gtk\+=2.4.4
GTK Gtk\+=2.5.6
GTK Gtk\+=1.3.15
GTK Gtk\+=2.8.3
GTK Gtk\+=2.1.1
GTK Gtk\+=1.1.12
GTK Gtk\+=2.4.5
GTK Gtk\+=1.3.11
GTK Gtk\+=1.2.3
GTK Gtk\+<=2.8.6
GTK Gtk\+=1.3.14
GTK Gtk\+=1.2.0
GTK Gtk\+=2.3.1
GTK Gtk\+=2.2.1
GTK Gtk\+=2.2.2
GTK Gtk\+=2.6.7
GTK Gtk\+=2.3.4
GTK Gtk\+=2.3.3
GTK Gtk\+=2.6.4
GTK Gtk\+=2.7.2
GTK Gtk\+=2.5.1
GTK Gtk\+=2.1.2
GTK Gtk\+=2.8.1
GTK Gtk\+=2.4.13
GTK Gtk\+=2.8.4
GTK Gtk\+=2.7.1
GTK Gtk\+=2.4.10
GTK Gtk\+=2.4.12
GTK Gtk\+=2.1.5
GTK Gtk\+=2.6.1
Remediation
Patch Available
Event History
Nov 18, 2005
CVE Published
06:03 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2976?
CVE-2005-2976 has a severity level that allows for denial of service or arbitrary code execution.
2
How do I fix CVE-2005-2976?
To fix CVE-2005-2976, upgrade to a version of gdk-pixbuf higher than 0.22 and GTK+ versions after 2.8.6.
3
Which versions of GdkPixbuf are affected by CVE-2005-2976?
CVE-2005-2976 affects GdkPixbuf version 0.22.
4
Which versions of GTK+ are impacted by CVE-2005-2976?
CVE-2005-2976 impacts GTK+ versions before 2.8.7.
5
What types of attacks are possible due to CVE-2005-2976?
CVE-2005-2976 allows attackers to cause a denial of service or execute arbitrary code through specially crafted XPM files.