CVE-2004-0753 — Infinite Loop in GTK

CWE-835 — Infinite Loop8 documents7 sources

Severity

5.0MEDIUMNVD

EPSS

12.0%

top 6.19%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Gnome Gdk-pixbuf Gnome GTK Gnome Gdkpixbuf

Timeline

PublishedOct 20

Latest updateApr 29

Description

The BMP image processor for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted BMP file.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages3 packages

▶Debiangnome/gdk-pixbuf< 0.22.0-7+3

▶NVDgnome/gdkpixbuf4 versions+3

▶NVDgnome/gtk2.0.0 — 2.2.4

Patches

Patch: www.redhat.com ↗Patch: www.redhat.com ↗Patch: www.redhat.com ↗

🔴Vulnerability Details

GHSA

GHSA-wjgf-crrq-vg9c: The BMP image processor for (1) gdk-pixbuf before 0↗2022-04-29

▶

OSV

CVE-2004-0753: The BMP image processor for (1) gdk-pixbuf before 0↗2004-10-20

▶

CVEList

CVE-2004-0753: The BMP image processor for (1) gdk-pixbuf before 0↗2004-09-17

▶

📋Vendor Advisories

Red Hat

security flaw↗2004-08-20

▶

Debian

CVE-2004-0753: gdk-pixbuf - The BMP image processor for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4...↗2004

▶

💬Community

Bugzilla

CVE-2004-0753 security flaw↗2018-08-16

▶