CVE-2004-0753: gnome gdkpixbuf Infinite Loop
CVSS: 5.0v2.0MediumModified
AliasesDEBIAN-CVE-2004-0753
Published 17-09-2004Last modified 08-08-2024
Vulnerability summary
CVE-2004-0753 is a medium (CVSS 5.0) Infinite Loop vulnerability in gnome gdkpixbuf. EPSS estimates a 5.92% chance of exploitation in the next 30 days, higher than 93.1% of scored vulnerabilities.
CVSS score
5.0/10
010
Medium · v2.0 (NVD)EPSS score
5.92%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 3Timeline
- 17-09-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
The BMP image processor for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted BMP file.
CVSS metrics
1 score · 1 source · 1 versionMedium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:N/A:PSourcesSingle source
EPSS trend
Probability
5.92%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
0.00 pp
From 5.92% on 18-09-2026
18-09-202618-10-2026
EPSS score5.92%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian1 product
- gdk-pixbuf< 0.22.0-7
2 vendors · 3 products
References
14 links- www.mandriva.com/security/advisories?name=MDKSA-2005:214Vendor AdvisoryX Refsource MANDRIVABroken Link
- www.securityfocus.com/archive/1/419771/100/0/threadedVendor AdvisoryX Refsource FEDORAThird Party AdvisoryVDB Entry
- www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095Vendor AdvisoryX Refsource MANDRAKEThird Party Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10585VDB EntrySignatureX Refsource OVALBroken Link
Show all 14 references
- distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875Vendor AdvisoryX Refsource CONECTIVAThird Party Advisory