CVE-2004-0753

The BMP image processor for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted BMP file.
References
Link Resource
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875 Third Party Advisory
http://secunia.com/advisories/17657 Broken Link
http://www.debian.org/security/2004/dsa-546 Third Party Advisory
http://www.kb.cert.org/vuls/id/825374 Third Party Advisory US Government Resource
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095 Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 Broken Link
http://www.redhat.com/support/errata/RHSA-2004-447.html Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-466.html Patch Vendor Advisory
http://www.securityfocus.com/archive/1/419771/100/0/threaded Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/11195 Third Party Advisory VDB Entry
https://bugzilla.fedora.us/show_bug.cgi?id=2005 Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/17383 Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10585 Broken Link
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875 Third Party Advisory
http://secunia.com/advisories/17657 Broken Link
http://www.debian.org/security/2004/dsa-546 Third Party Advisory
http://www.kb.cert.org/vuls/id/825374 Third Party Advisory US Government Resource
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095 Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 Broken Link
http://www.redhat.com/support/errata/RHSA-2004-447.html Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-466.html Patch Vendor Advisory
http://www.securityfocus.com/archive/1/419771/100/0/threaded Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/11195 Third Party Advisory VDB Entry
https://bugzilla.fedora.us/show_bug.cgi?id=2005 Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/17383 Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10585 Broken Link
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:gnome:gdkpixbuf:0.17:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdkpixbuf:0.18:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdkpixbuf:0.20:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdkpixbuf:0.22:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gtk:*:*:*:*:*:*:*:*

History

20 Nov 2024, 23:49

Type Values Removed Values Added
References () http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875 - Third Party Advisory () http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875 - Third Party Advisory
References () http://secunia.com/advisories/17657 - Broken Link () http://secunia.com/advisories/17657 - Broken Link
References () http://www.debian.org/security/2004/dsa-546 - Third Party Advisory () http://www.debian.org/security/2004/dsa-546 - Third Party Advisory
References () http://www.kb.cert.org/vuls/id/825374 - Third Party Advisory, US Government Resource () http://www.kb.cert.org/vuls/id/825374 - Third Party Advisory, US Government Resource
References () http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095 - Third Party Advisory () http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095 - Third Party Advisory
References () http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 - Broken Link () http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 - Broken Link
References () http://www.redhat.com/support/errata/RHSA-2004-447.html - Patch, Vendor Advisory () http://www.redhat.com/support/errata/RHSA-2004-447.html - Patch, Vendor Advisory
References () http://www.redhat.com/support/errata/RHSA-2004-466.html - Patch, Vendor Advisory () http://www.redhat.com/support/errata/RHSA-2004-466.html - Patch, Vendor Advisory
References () http://www.securityfocus.com/archive/1/419771/100/0/threaded - Third Party Advisory, VDB Entry () http://www.securityfocus.com/archive/1/419771/100/0/threaded - Third Party Advisory, VDB Entry
References () http://www.securityfocus.com/bid/11195 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/11195 - Third Party Advisory, VDB Entry
References () https://bugzilla.fedora.us/show_bug.cgi?id=2005 - Issue Tracking () https://bugzilla.fedora.us/show_bug.cgi?id=2005 - Issue Tracking
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/17383 - Third Party Advisory, VDB Entry () https://exchange.xforce.ibmcloud.com/vulnerabilities/17383 - Third Party Advisory, VDB Entry
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10585 - Broken Link () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10585 - Broken Link

11 Aug 2023, 20:18

Type Values Removed Values Added
CWE NVD-CWE-Other CWE-835
References (FEDORA) https://bugzilla.fedora.us/show_bug.cgi?id=2005 - (FEDORA) https://bugzilla.fedora.us/show_bug.cgi?id=2005 - Issue Tracking
References (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/17383 - (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/17383 - Third Party Advisory, VDB Entry
References (CONECTIVA) http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875 - (CONECTIVA) http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875 - Third Party Advisory
References (DEBIAN) http://www.debian.org/security/2004/dsa-546 - (DEBIAN) http://www.debian.org/security/2004/dsa-546 - Third Party Advisory
References (CERT-VN) http://www.kb.cert.org/vuls/id/825374 - US Government Resource (CERT-VN) http://www.kb.cert.org/vuls/id/825374 - Third Party Advisory, US Government Resource
References (SECUNIA) http://secunia.com/advisories/17657 - (SECUNIA) http://secunia.com/advisories/17657 - Broken Link
References (MANDRIVA) http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 - (MANDRIVA) http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 - Broken Link
References (MANDRAKE) http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095 - (MANDRAKE) http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095 - Third Party Advisory
References (FEDORA) http://www.securityfocus.com/archive/1/419771/100/0/threaded - (FEDORA) http://www.securityfocus.com/archive/1/419771/100/0/threaded - Third Party Advisory, VDB Entry
References (BID) http://www.securityfocus.com/bid/11195 - (BID) http://www.securityfocus.com/bid/11195 - Third Party Advisory, VDB Entry
References (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10585 - (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10585 - Broken Link
CPE cpe:2.3:a:gtk:gtk\+:2.2.4:*:*:*:*:*:*:*
cpe:2.3:a:gtk:gtk\+:2.0.6:*:*:*:*:*:*:*
cpe:2.3:a:gtk:gtk\+:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:gtk:gtk\+:2.2.3:*:*:*:*:*:*:*
cpe:2.3:a:gtk:gtk\+:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gtk:*:*:*:*:*:*:*:*

Information

Published : 2004-10-20 04:00

Updated : 2024-11-20 23:49


NVD link : CVE-2004-0753

Mitre link : CVE-2004-0753

CVE.ORG link : CVE-2004-0753


JSON object : View

Products Affected

gnome

  • gtk
  • gdkpixbuf
CWE
CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')