CVE-2005-3186
Fixed in a distro release EPSS 5%
Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows attackers to execute arbitrary code via an XPM file with a number of colors that causes insufficient memory to be allocated, which leads to a heap-based buffer overflow.
Products: gnome gdkpixbuf, gtk+
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | gdk-pixbuf | 0.22.0-11 |
| Debian 12 | gtk+2.0 | 2.6.10-2 |
| Debian 13 | gdk-pixbuf | 0.22.0-11 |
| Debian 13 | gtk+2.0 | 2.6.10-2 |
| Debian 14 | gdk-pixbuf | 0.22.0-11 |
| Debian 14 | gtk+2.0 | 2.6.10-2 |
| Debian 3.0 | gdk-pixbuf | 0.17.0-2woody3 |
| Debian 3.0 | gtk+2.0 | 2.0.2-5woody3 |
| Debian 3.1 | gdk-pixbuf | 0.22.0-8.1 |
| Debian 3.1 | gtk+2.0 | 2.6.4-3.1 |
| Red Hat Enterprise Linux 3 | gdk-pixbuf | 1:0.22.0-13.el3.3 |
| Red Hat Enterprise Linux 3 | gdk-pixbuf-debuginfo | 1:0.22.0-13.el3.3 |
| Red Hat Enterprise Linux 3 | gdk-pixbuf-devel | 1:0.22.0-13.el3.3 |
| Red Hat Enterprise Linux 3 | gdk-pixbuf-gnome | 1:0.22.0-13.el3.3 |
| Red Hat Enterprise Linux 3 | gtk2 | 0:2.2.4-19 |
| Red Hat Enterprise Linux 3 | gtk2-debuginfo | 0:2.2.4-19 |
| Red Hat Enterprise Linux 3 | gtk2-devel | 0:2.2.4-19 |
| Red Hat Enterprise Linux 4 | gdk-pixbuf | 1:0.22.0-17.el4.3 |
| Red Hat Enterprise Linux 4 | gdk-pixbuf-debuginfo | 1:0.22.0-17.el4.3 |
| Red Hat Enterprise Linux 4 | gdk-pixbuf-devel | 1:0.22.0-17.el4.3 |
| Red Hat Enterprise Linux 4 | gtk2 | 0:2.4.13-18 |
| Red Hat Enterprise Linux 4 | gtk2-debuginfo | 0:2.4.13-18 |
| Red Hat Enterprise Linux 4 | gtk2-devel | 0:2.4.13-18 |