CVE-2005-3186

2005-11-1800:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.021

Percentile

89.2%

JSON

Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+
2.4.0 allows attackers to execute arbitrary code via an XPM file with a
number of colors that causes insufficient memory to be allocated, which
leads to a heap-based buffer overflow.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchgdk-pixbuf< 0.22.0-11UNKNOWN
ubuntu6.10noarchgdk-pixbuf< 0.22.0-11UNKNOWN
ubuntu7.04noarchgdk-pixbuf< 0.22.0-11UNKNOWN
ubuntu6.06noarchgtk+2.0< 2.8.20-0ubuntu1.1UNKNOWN
ubuntu6.10noarchgtk+2.0< 2.10.6-0ubuntu3.1UNKNOWN
ubuntu7.04noarchgtk+2.0< 2.10.11-0ubuntu3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	gdk-pixbuf	< 0.22.0-11	UNKNOWN
ubuntu	6.10	noarch	gdk-pixbuf	< 0.22.0-11	UNKNOWN
ubuntu	7.04	noarch	gdk-pixbuf	< 0.22.0-11	UNKNOWN
ubuntu	6.06	noarch	gtk+2.0	< 2.8.20-0ubuntu1.1	UNKNOWN
ubuntu	6.10	noarch	gtk+2.0	< 2.10.6-0ubuntu3.1	UNKNOWN
ubuntu	7.04	noarch	gtk+2.0	< 2.10.11-0ubuntu3	UNKNOWN