CVE-2005-2975

高危 7.8CVE-2005-2975 · Published 18/11/2005 · updated 16/06/2026

要点

CVE-2005-2975 是影响 gtk (gnome) 的高危 (CVSS 7.8)漏洞。
未来 30 天内被利用的概率（EPSS）：3.7%，高于 89.9% 的漏洞。
修复：升级到 2.8.7 或更高版本。

Package	Affected versions	Patched versions
gtk gnome	`< 2.8.7`	`2.8.7`

Description

io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial of service (infinite loop) via a crafted XPM image with a large number of colors.

References

secunia.com/advisories/17522 · Broken Link
secunia.com/advisories/17538 · Broken Link
secunia.com/advisories/17562 · Broken Link
secunia.com/advisories/17588 · Broken Link
secunia.com/advisories/17591 · Broken Link
secunia.com/advisories/17592 · Broken Link
secunia.com/advisories/17594 · Broken Link
secunia.com/advisories/17615 · Broken Link
secunia.com/advisories/17657 · Broken Link
secunia.com/advisories/17710 · Broken Link
secunia.com/advisories/17770 · Broken Link
secunia.com/advisories/17791 · Broken Link
securitytracker.com/id · Broken Link
support.avaya.com/elmodocs2/security/ASA-2005-229.pdf · Third Party Advisory
debian.org/security/2005/dsa-911 · Third Party Advisory
debian.org/security/2005/dsa-913 · Third Party Advisory
gentoo.org/security/en/glsa/glsa-200511-14.xml · Third Party Advisory
mandriva.com/security/advisories · Broken Link
novell.com/linux/security/advisories/2005_65_gtk2.html · Third Party Advisory
redhat.com/support/errata/RHSA-2005-810.html · Patch
redhat.com/support/errata/RHSA-2005-811.html · Third Party Advisory
securityfocus.com/archive/1/428052/100/0/threaded · Broken Link
securityfocus.com/bid/15429 · Third Party Advisory
ubuntu.com/usn/usn-216-1 · Third Party Advisory
vupen.com/english/advisories/2005/2433 · Vendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9697 · Broken Link

gtk 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free