Description
Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- GNOME / gtk2.0.0 – 2.2.4
References
- MISChttp://www.securityfocus.com/bid/12950
- MISChttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000958
- MISChttp://www.redhat.com/support/errata/RHSA-2005-343.html
- VENDOR_ADVISORYhttp://www.mandriva.com/security/advisories?name=MDKSA-2005:214
- MISChttp://www.securityfocus.com/archive/1/419771/100/0/threaded
- MISChttp://www.redhat.com/support/errata/RHSA-2005-344.html
- MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9710
- VENDOR_ADVISORYhttp://secunia.com/advisories/17657
Updated 4m ago · 8 sources