// For flags

CVE-2005-3186

 

Severity Score

8.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows attackers to execute arbitrary code via an XPM file with a number of colors that causes insufficient memory to be allocated, which leads to a heap-based buffer overflow.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2005-10-12 CVE Reserved
  • 2005-11-18 CVE Published
  • 2024-08-07 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
References (32)
URL Tag Source
http://secunia.com/advisories/17522 Third Party Advisory
http://secunia.com/advisories/17538 Third Party Advisory
http://secunia.com/advisories/17562 Third Party Advisory
http://secunia.com/advisories/17588 Third Party Advisory
http://secunia.com/advisories/17591 Third Party Advisory
http://secunia.com/advisories/17592 Third Party Advisory
http://secunia.com/advisories/17594 Third Party Advisory
http://secunia.com/advisories/17615 Third Party Advisory
http://secunia.com/advisories/17657 Third Party Advisory
http://secunia.com/advisories/17710 Third Party Advisory
http://secunia.com/advisories/17770 Third Party Advisory
http://secunia.com/advisories/17791 Third Party Advisory
http://secunia.com/advisories/18509 Third Party Advisory
http://securityreason.com/securityalert/188 Third Party Advisory
http://securitytracker.com/id?1015216 Vdb Entry
http://support.avaya.com/elmodocs2/security/ASA-2005-229.pdf X_refsource_confirm
http://www.securityfocus.com/bid/15435 Vdb Entry
http://www.vupen.com/english/advisories/2005/2433 Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9503 Signature
URL Date SRC
URL Date SRC
http://www.idefense.com/application/poi/display?id=339&type=vulnerabilities 2018-10-19
http://www.redhat.com/support/errata/RHSA-2005-810.html 2018-10-19
URL Date SRC
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.8/SCOSA-2006.8.txt 2018-10-19
http://www.debian.org/security/2005/dsa-911 2018-10-19
http://www.debian.org/security/2005/dsa-913 2018-10-19
http://www.gentoo.org/security/en/glsa/glsa-200511-14.xml 2018-10-19
http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 2018-10-19
http://www.novell.com/linux/security/advisories/2005_65_gtk2.html 2018-10-19
http://www.redhat.com/support/errata/RHSA-2005-811.html 2018-10-19
http://www.securityfocus.com/archive/1/428052/100/0/threaded 2018-10-19
http://www.ubuntu.com/usn/usn-216-1 2018-10-19
https://access.redhat.com/security/cve/CVE-2005-3186 2005-11-15
https://bugzilla.redhat.com/show_bug.cgi?id=1617795 2005-11-15
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Gnome
Search vendor "Gnome"
 Gdkpixbuf
Search vendor "Gnome" for product "Gdkpixbuf"
*-
Affected
Gtk
Search vendor "Gtk"
 Gtk\+
Search vendor "Gtk" for product "Gtk\+"
 2.4.0
Search vendor "Gtk" for product "Gtk\+" and version "2.4.0"
-
Affected