CVE-2005-3186
EPSS 2.2%
Description
Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows attackers to execute arbitrary code via an XPM file with a number of colors that causes insufficient memory to be allocated, which leads to a heap-based buffer overflow.
How to fix CVE-2005-3186
To remediate CVE-2005-3186, upgrade the affected package to a fixed version below.
- Debian/gdk-pixbuf—upgrade to 0.22.0-11 or later
- Debian/gtk+2.0—upgrade to 2.6.10-2 or later
Is CVE-2005-3186 being exploited?
Low — EPSS is 2.2%, meaning exploitation activity has not been observed at scale.
Affected packages (2)
- from 0, < 0.22.0-11
- from 0, < 2.6.10-2