Integer overflow in Gnome Gdkpixbuf
CVE-2004-0788
Integer overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted ICO file.
Vulnerability class: Integer Overflow
EPSS: 0.059 (92.4th percentile) — read the EPSS interpretation.
Affected products
- Gnome Gdkpixbuf — versions 0.17, 0.18, 0.20
- Gnome Gtk
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_FEDORA, vendor-advisory, Issue Tracking)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRIVA, Broken Link)
- cve@mitre.org (x_refsource_FEDORA, vendor-advisory, VDB Entry, Third Party Advisory)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_MANDRAKE)
- cve@mitre.org (Broken Link, x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Patch, Third Party Advisory, Vendor Advisory)