CVE-2005-2976

EPSS 1.7%

Published: 11/18/2005Modified: 4/28/2026

Also known as:DEBIAN-CVE-2005-2976

Description

Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 allows attackers to cause a denial of service (crash) or execute arbitrary code via an XPM file with large height, width, and colour values, a different vulnerability than CVE-2005-3186.

Affected packages (2)

Debian/gdk-pixbuffrom 0, < 0.22.0-11
Debian/gtk+2.0from 0, < 2.6.10-2

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2005-2976