Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2005-2976

Quick assessment

Affected

n/a n/a

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

GTK+是用于创建图形用户界面的多平台工具包。 GTK+ 2.8.7以前的版本中，gdk-pixbuf 0.22.0 中的io-xpm.c存在整数溢出漏洞，这允许攻击者通过一个具有很大高度、宽度和颜色值的XPM文件来实现拒绝服务攻击或执行任意的代码。

AI Predicted 9.3 Difficulty: Easy EPSS 4.54% · P91 Updated Feb 27, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2005-2976

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 allows attackers to cause a denial of service (crash) or execute arbitrary code via an XPM file with large height, width, and colour values, a different vulnerability than CVE-2005-3186.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

GTK+ gdk-pixbuf XPM图形渲染库io-xpm整数溢出漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2005-2976

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2005-2976

请登录查看更多情报信息。

Vendor Advisories for CVE-2005-2976 (17)

http://secunia.com/advisories/17562 third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/bid/15428 vdb-entry x_refsource_BID
http://secunia.com/advisories/17522 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/17657 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/17538 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/17770 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/17594 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/17791 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/17592 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/17710 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/17615 third-party-advisory x_refsource_SECUNIA
http://www.debian.org/security/2005/dsa-911 vendor-advisory x_refsource_DEBIAN
http://securitytracker.com/id?1015216 vdb-entry x_refsource_SECTRACK
http://www.securityfocus.com/archive/1/428052/100/0/threaded vendor-advisory x_refsource_FEDORA
http://www.vupen.com/english/advisories/2005/2433 vdb-entry x_refsource_VUPEN
http://www.mandriva.com/security/advisories?name=MDKSA-2005:214 vendor-advisory x_refsource_MANDRIVA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11370 vdb-entry signature x_refsource_OVAL

Other References for CVE-2005-2976 (4)

http://support.avaya.com/elmodocs2/security/ASA-2005-229.pdf x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2005-810.html vendor-advisory x_refsource_REDHAT
http://www.gentoo.org/security/en/glsa/glsa-200511-14.xml vendor-advisory x_refsource_GENTOO
http://www.novell.com/linux/security/advisories/2005_65_gtk2.html vendor-advisory x_refsource_SUSE

https://www.cve.org/CVERecord?id=CVE-2005-2976

Same Patch Batch · n/a · 2005-11-18 · 39 CVEs total

CVE-2005-2975		GTK+ gdk-pixbuf XPM图形渲染库io-xpm拒绝服务漏洞
CVE-2005-3672		Stonesoft StoneGate Firewall IKE 拒绝服务漏洞
CVE-2005-3673		Check Point 产品IKE未明的拒绝服务漏洞
CVE-2005-3674		Sun Solaris LibIKE库 IKE 拒绝服务漏洞
CVE-2005-1925		TikiWiki 多个目录遍历漏洞
CVE-2005-2929		Lynx URI处理器任意命令执行漏洞
CVE-2005-2936		RealNetworks RealPlayer Windows搜索路径漏洞
CVE-2005-2938		APPLE iTunes非上市Windows搜索路径漏洞
CVE-2005-2939		VMWare VMWare Workstation WINDOWS搜索路径漏洞
CVE-2005-2940		Microsoft Antispyware非上市WINDOWS搜索路径漏洞
CVE-2005-3671		Openswan-2 IKE拒绝服务漏洞
CVE-2005-3116		Veritas NetBackup卷管理器守护程序溢出漏洞
CVE-2005-3186		GTK+ gdk-pixbuf XPM图形渲染库整数溢出漏洞
CVE-2005-3663		Kaspersky Anti-Virus 未引用的Windows搜索路径漏洞
CVE-2005-3664		Kaspersky杀毒引擎CHM文件解析器远程溢出漏洞
CVE-2005-3189		Qualcomm Worldmail服务器目录遍历漏洞
CVE-2005-3347		phpSysInfo index.php多个目录遍历漏洞
CVE-2005-3348		PHPsysInfo index.php响应分割漏洞
CVE-2005-3662		PNMToPNG Alphas_Of_Color缓冲区溢出漏洞
CVE-2005-3682		Wizz Forum多个SQL注入漏洞

Showing top 20 of 39 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2005-2976

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2005-2976

Quick assessment

I. Basic Information for CVE-2005-2976

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2005-2976

III. Intelligence Information for CVE-2005-2976

Vendor Advisories for CVE-2005-2976 (17)

Other References for CVE-2005-2976 (4)

Same Patch Batch · n/a · 2005-11-18 · 39 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2005-2976

Leave a comment