CVE-2005-2976: gnome gdkpixbuf Integer Overflow or Wraparound

EPSS trend

Probability

4.54%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.54% on 18-09-2026

18-09-202618-10-2026

EPSS score

4.54%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

24 links

www.novell.com/linux/security/advisories/2005_65_gtk2.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
www.gentoo.org/security/en/glsa/glsa-200511-14.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/17710Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/428052/100/0/threadedVendor AdvisoryX Refsource FEDORAThird Party AdvisoryVDB Entry
www.debian.org/security/2005/dsa-911Vendor AdvisoryX Refsource DEBIANThird Party Advisory
secunia.com/advisories/17562Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/17615Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/17522Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2005/2433VDB EntryX Refsource VUPENBroken LinkVendor Advisory
www.debian.org/security/2005/dsa-913Vendor AdvisoryX Refsource DEBIANThird Party Advisory

Show all 24 references

secunia.com/advisories/17538Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.ubuntu.com/usn/usn-216-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.mandriva.com/security/advisories?name=MDKSA-2005:214Vendor AdvisoryX Refsource MANDRIVABroken LinkThird Party Advisory
securitytracker.com/id?1015216VDB EntryX Refsource SECTRACKThird Party Advisory
www.securityfocus.com/bid/15428VDB EntryX Refsource BIDBroken LinkThird Party Advisory
secunia.com/advisories/17770Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/17594Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/17592Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/17791Third Party AdvisoryX Refsource SECUNIAVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11370VDB EntrySignatureX Refsource OVALBroken Link
secunia.com/advisories/17657Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2005-810.htmlVendor AdvisoryX Refsource REDHATPatch
support.avaya.com/elmodocs2/security/ASA-2005-229.pdfX Refsource CONFIRMThird Party Advisory
security-tracker.debian.org/tracker/CVE-2005-2976Advisory

Related vulnerabilities

CVE-2021-44648alpinegdk-pixbuf+231.91%4y ago12-01-2022 12:31GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.CVE-2007-0010debiangtk+2.0+40.93%19y ago24-01-2007 19:00The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent attackers to cause a denial of service (crash) via a malformed image file.CVE-2025-6199debiangdk-pixbuf+40.21%1y ago17-06-2025 14:30A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.CVE-2014-1949chainguardgtk-2.0+80.33%11y ago16-01-2015 16:00GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button.CVE-2001-0084gnomegtk1.05%25y ago02-02-2001 05:00GTK+ library allows local users to specify arbitrary modules via the GTK_MODULES environmental variable, which could allow local users to gain privileges if GTK+ is used by a setuid/setgid program.CVE-2005-2975debiangdk-pixbuf+23.74%20y ago18-11-2005 11:00io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial of service (infinite loop) via a crafted XPM image with a large number of colors.

All vulnerabilities ingdkpixbuf gtk

CVE-2005-2976: gnome gdkpixbuf Integer Overflow or Wraparound

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References