CVE-2004-0788

Integer overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted ICO file.
References
Link Resource
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875 Third Party Advisory
http://secunia.com/advisories/17657 Broken Link
http://www.debian.org/security/2004/dsa-546 Third Party Advisory
http://www.kb.cert.org/vuls/id/577654 Third Party Advisory US Government Resource
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095 Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 Broken Link
http://www.redhat.com/support/errata/RHSA-2004-447.html Patch Third Party Advisory Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-466.html Patch Vendor Advisory
http://www.securityfocus.com/archive/1/419771/100/0/threaded Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/11195 Third Party Advisory VDB Entry
https://bugzilla.fedora.us/show_bug.cgi?id=2005 Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/17387 Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10506 Broken Link
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875 Third Party Advisory
http://secunia.com/advisories/17657 Broken Link
http://www.debian.org/security/2004/dsa-546 Third Party Advisory
http://www.kb.cert.org/vuls/id/577654 Third Party Advisory US Government Resource
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095 Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 Broken Link
http://www.redhat.com/support/errata/RHSA-2004-447.html Patch Third Party Advisory Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-466.html Patch Vendor Advisory
http://www.securityfocus.com/archive/1/419771/100/0/threaded Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/11195 Third Party Advisory VDB Entry
https://bugzilla.fedora.us/show_bug.cgi?id=2005 Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/17387 Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10506 Broken Link
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:gnome:gdkpixbuf:0.17:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdkpixbuf:0.18:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdkpixbuf:0.20:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdkpixbuf:0.22:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gtk:*:*:*:*:*:*:*:*

History

20 Nov 2024, 23:49

Type Values Removed Values Added
References () http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875 - Third Party Advisory () http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875 - Third Party Advisory
References () http://secunia.com/advisories/17657 - Broken Link () http://secunia.com/advisories/17657 - Broken Link
References () http://www.debian.org/security/2004/dsa-546 - Third Party Advisory () http://www.debian.org/security/2004/dsa-546 - Third Party Advisory
References () http://www.kb.cert.org/vuls/id/577654 - Third Party Advisory, US Government Resource () http://www.kb.cert.org/vuls/id/577654 - Third Party Advisory, US Government Resource
References () http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095 - Third Party Advisory () http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095 - Third Party Advisory
References () http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 - Broken Link () http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 - Broken Link
References () http://www.redhat.com/support/errata/RHSA-2004-447.html - Patch, Third Party Advisory, Vendor Advisory () http://www.redhat.com/support/errata/RHSA-2004-447.html - Patch, Third Party Advisory, Vendor Advisory
References () http://www.redhat.com/support/errata/RHSA-2004-466.html - Patch, Vendor Advisory () http://www.redhat.com/support/errata/RHSA-2004-466.html - Patch, Vendor Advisory
References () http://www.securityfocus.com/archive/1/419771/100/0/threaded - Third Party Advisory, VDB Entry () http://www.securityfocus.com/archive/1/419771/100/0/threaded - Third Party Advisory, VDB Entry
References () http://www.securityfocus.com/bid/11195 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/11195 - Third Party Advisory, VDB Entry
References () https://bugzilla.fedora.us/show_bug.cgi?id=2005 - Issue Tracking () https://bugzilla.fedora.us/show_bug.cgi?id=2005 - Issue Tracking
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/17387 - Third Party Advisory, VDB Entry () https://exchange.xforce.ibmcloud.com/vulnerabilities/17387 - Third Party Advisory, VDB Entry
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10506 - Broken Link () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10506 - Broken Link

11 Aug 2023, 20:18

Type Values Removed Values Added
First Time Gnome gtk
CWE NVD-CWE-Other CWE-190
CPE cpe:2.3:a:gtk:gtk\+:2.2.4:*:*:*:*:*:*:*
cpe:2.3:a:gtk:gtk\+:2.0.6:*:*:*:*:*:*:*
cpe:2.3:a:gtk:gtk\+:2.2.3:*:*:*:*:*:*:*
cpe:2.3:a:gtk:gtk\+:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:gtk:gtk\+:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gtk:*:*:*:*:*:*:*:*
References (CONECTIVA) http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875 - (CONECTIVA) http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875 - Third Party Advisory
References (CERT-VN) http://www.kb.cert.org/vuls/id/577654 - US Government Resource (CERT-VN) http://www.kb.cert.org/vuls/id/577654 - Third Party Advisory, US Government Resource
References (FEDORA) http://www.securityfocus.com/archive/1/419771/100/0/threaded - (FEDORA) http://www.securityfocus.com/archive/1/419771/100/0/threaded - Third Party Advisory, VDB Entry
References (REDHAT) http://www.redhat.com/support/errata/RHSA-2004-447.html - Patch, Vendor Advisory (REDHAT) http://www.redhat.com/support/errata/RHSA-2004-447.html - Patch, Third Party Advisory, Vendor Advisory
References (DEBIAN) http://www.debian.org/security/2004/dsa-546 - (DEBIAN) http://www.debian.org/security/2004/dsa-546 - Third Party Advisory
References (FEDORA) https://bugzilla.fedora.us/show_bug.cgi?id=2005 - (FEDORA) https://bugzilla.fedora.us/show_bug.cgi?id=2005 - Issue Tracking
References (MANDRAKE) http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095 - (MANDRAKE) http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095 - Third Party Advisory
References (MANDRIVA) http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 - (MANDRIVA) http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 - Broken Link
References (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10506 - (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10506 - Broken Link
References (BID) http://www.securityfocus.com/bid/11195 - (BID) http://www.securityfocus.com/bid/11195 - Third Party Advisory, VDB Entry
References (SECUNIA) http://secunia.com/advisories/17657 - (SECUNIA) http://secunia.com/advisories/17657 - Broken Link
References (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/17387 - (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/17387 - Third Party Advisory, VDB Entry

Information

Published : 2004-10-20 04:00

Updated : 2024-11-20 23:49


NVD link : CVE-2004-0788

Mitre link : CVE-2004-0788

CVE.ORG link : CVE-2004-0788


JSON object : View

Products Affected

gnome

  • gtk
  • gdkpixbuf
CWE
CWE-190

Integer Overflow or Wraparound