HIGH
security flaw
Published Nov 18, 2005
7.8
HIGHCVSS 2.0
EPSS 3.74%
Description
io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial of service (infinite loop) via a crafted XPM image with a large number of colors.
Affected products
No data.
No data.
Red Hat Enterprise Linux 3
gdk-pixbuf-1:0.22.0-13.el3.3
Fixed · RHSA-2005:810
Red Hat Enterprise Linux 3
gtk2-0:2.2.4-19
Fixed · RHSA-2005:811
Red Hat Enterprise Linux 4
gdk-pixbuf-1:0.22.0-17.el4.3
Fixed · RHSA-2005:810
Red Hat Enterprise Linux 4
gtk2-0:2.4.13-18
Fixed · RHSA-2005:811
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 3 | gdk-pixbuf-1:0.22.0-13.el3.3 | Fixed | RHSA-2005:810 |
| Red Hat Enterprise Linux 3 | gtk2-0:2.2.4-19 | Fixed | RHSA-2005:811 |
| Red Hat Enterprise Linux 4 | gdk-pixbuf-1:0.22.0-17.el4.3 | Fixed | RHSA-2005:810 |
| Red Hat Enterprise Linux 4 | gtk2-0:2.4.13-18 | Fixed | RHSA-2005:811 |
No package ranges for this CVE.
Remediation
Red Hat statement
Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.
Weaknesses (1)
References (30)
- http://secunia.com/advisories/17522 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://secunia.com/advisories/17538 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://secunia.com/advisories/17562 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://secunia.com/advisories/17588 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://secunia.com/advisories/17591 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://secunia.com/advisories/17592 third-party-advisoryx_refsource_SECUNIABroken Link
- http://secunia.com/advisories/17594 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://secunia.com/advisories/17615 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://secunia.com/advisories/17657 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://secunia.com/advisories/17710 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://secunia.com/advisories/17770 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://secunia.com/advisories/17791 third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
- http://securitytracker.com/id?1015216 vdb-entryx_refsource_SECTRACKBroken LinkThird Party AdvisoryVDB Entry
- http://support.avaya.com/elmodocs2/security/ASA-2005-229.pdf x_refsource_CONFIRMThird Party Advisory
- http://www.debian.org/security/2005/dsa-911 vendor-advisoryx_refsource_DEBIANThird Party Advisory
- http://www.debian.org/security/2005/dsa-913 vendor-advisoryx_refsource_DEBIANThird Party Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200511-14.xml vendor-advisoryx_refsource_GENTOOThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 vendor-advisoryx_refsource_MANDRIVABroken Link
- http://www.novell.com/linux/security/advisories/2005_65_gtk2.html vendor-advisoryx_refsource_SUSEThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2005-810.html vendor-advisoryx_refsource_REDHATPatchThird Party AdvisoryVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-811.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://www.securityfocus.com/archive/1/428052/100/0/threaded vendor-advisoryx_refsource_FEDORABroken LinkThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/15429 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- http://www.ubuntu.com/usn/usn-216-1 vendor-advisoryx_refsource_UBUNTUThird Party Advisory
- http://www.vupen.com/english/advisories/2005/2433 vdb-entryx_refsource_VUPENVendor Advisory
- https://access.redhat.com/security/cve/CVE-2005-2975 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1617771 Issue Tracking
- https://nvd.nist.gov/vuln/detail/CVE-2005-2975
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9697 vdb-entrysignaturex_refsource_OVALBroken Link
- https://www.cve.org/CVERecord?id=CVE-2005-2975
| Link | Providers | Tags |
|---|---|---|
| http://secunia.com/advisories/17522 | third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory | |
| http://secunia.com/advisories/17538 | third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory | |
| http://secunia.com/advisories/17562 | third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory | |
| http://secunia.com/advisories/17588 | third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory | |
| http://secunia.com/advisories/17591 | third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory | |
| http://secunia.com/advisories/17592 | third-party-advisoryx_refsource_SECUNIABroken Link | |
| http://secunia.com/advisories/17594 | third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory | |
| http://secunia.com/advisories/17615 | third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory | |
| http://secunia.com/advisories/17657 | third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory | |
| http://secunia.com/advisories/17710 | third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory | |
| http://secunia.com/advisories/17770 | third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory | |
| http://secunia.com/advisories/17791 | third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory | |
| http://securitytracker.com/id?1015216 | vdb-entryx_refsource_SECTRACKBroken LinkThird Party AdvisoryVDB Entry | |
| http://support.avaya.com/elmodocs2/security/ASA-2005-229.pdf | x_refsource_CONFIRMThird Party Advisory | |
| http://www.debian.org/security/2005/dsa-911 | vendor-advisoryx_refsource_DEBIANThird Party Advisory | |
| http://www.debian.org/security/2005/dsa-913 | vendor-advisoryx_refsource_DEBIANThird Party Advisory | |
| http://www.gentoo.org/security/en/glsa/glsa-200511-14.xml | vendor-advisoryx_refsource_GENTOOThird Party Advisory | |
| http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 | vendor-advisoryx_refsource_MANDRIVABroken Link | |
| http://www.novell.com/linux/security/advisories/2005_65_gtk2.html | vendor-advisoryx_refsource_SUSEThird Party Advisory | |
| http://www.redhat.com/support/errata/RHSA-2005-810.html | vendor-advisoryx_refsource_REDHATPatchThird Party AdvisoryVendor Advisory | |
| http://www.redhat.com/support/errata/RHSA-2005-811.html | vendor-advisoryx_refsource_REDHATThird Party Advisory | |
| http://www.securityfocus.com/archive/1/428052/100/0/threaded | vendor-advisoryx_refsource_FEDORABroken LinkThird Party AdvisoryVDB Entry | |
| http://www.securityfocus.com/bid/15429 | vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry | |
| http://www.ubuntu.com/usn/usn-216-1 | vendor-advisoryx_refsource_UBUNTUThird Party Advisory | |
| http://www.vupen.com/english/advisories/2005/2433 | vdb-entryx_refsource_VUPENVendor Advisory | |
| https://access.redhat.com/security/cve/CVE-2005-2975 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1617771 | Issue Tracking | |
| https://nvd.nist.gov/vuln/detail/CVE-2005-2975 | ||
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9697 | vdb-entrysignaturex_refsource_OVALBroken Link | |
| https://www.cve.org/CVERecord?id=CVE-2005-2975 |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Nov 18, 2005
Updated Aug 7, 2024
Reserved Sep 19, 2005
Link CVE-2005-2975
CISA Vulnrichment
Updated n/a