CVE Feed

    Dashboard / CVE / CVE-2007-0010

    CVE-2007-0010

    The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent attackers to cause a denial of service (crash) via a malformed image file.

    Published:Jan 10, 2007
    Last Modified:Apr 23, 2026
    EPS:Jan 24, 2007
    EPSS Score:0.0093
    CVSS Score:2.1

    Affected Products

    Vendor
    Gnome
    Product
    Gtk
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    https://www.exploit-db.com/exploits/29520

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2014-1949 (CVSS 7.2) — GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows ph…
    CVE-2012-0828 (CVSS 9.8) — Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could all…
    CVE-2010-4833 (CVSS 9.3) — Untrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c in GTK+ before 2.24.0 allows loca…
    CVE-2010-4831 (CVSS 6.9) — Untrusted search path vulnerability in gdk/win32/gdkinput-win32.c in GTK+ before 2.21.8 allows local users to …
    CVE-2010-0732 (CVSS 6.2) — gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on…
    CVE-2005-2975 (CVSS 7.8) — io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial…
    CVE-2005-2976 (CVSS 7.5) — Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 allows attackers to cause a denial of s…
    CVE-2005-0891 (CVSS 7.5) — Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (c…
    CVE-2005-0372 (CVSS 5) — Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read a…
    CVE-2004-0788 (CVSS 5) — Integer overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remo…

    References

    http://osvdb.org/31621
    http://secunia.com/advisories/23884
    http://secunia.com/advisories/23933
    http://secunia.com/advisories/23935
    http://secunia.com/advisories/23984
    http://secunia.com/advisories/24006
    http://secunia.com/advisories/24010
    http://secunia.com/advisories/24095
    http://securitytracker.com/id?1017552
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:039
    http://www.novell.com/linux/security/advisories/2007_02_sr.html
    http://www.redhat.com/support/errata/RHSA-2007-0019.html
    http://www.securityfocus.com/bid/22209
    http://www.ubuntu.com/usn/usn-415-1
    http://www.vupen.com/english/advisories/2007/0331
    https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=218932
    https://issues.rpath.com/browse/RPL-984
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10325
    https://www.debian.org/security/2007/dsa-1256
    http://osvdb.org/31621
    http://secunia.com/advisories/23884
    http://secunia.com/advisories/23933
    http://secunia.com/advisories/23935
    http://secunia.com/advisories/23984
    http://secunia.com/advisories/24006
    http://secunia.com/advisories/24010
    http://secunia.com/advisories/24095
    http://securitytracker.com/id?1017552
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:039
    http://www.novell.com/linux/security/advisories/2007_02_sr.html
    http://www.redhat.com/support/errata/RHSA-2007-0019.html
    http://www.securityfocus.com/bid/22209
    http://www.ubuntu.com/usn/usn-415-1
    http://www.vupen.com/english/advisories/2007/0331
    https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=218932
    https://issues.rpath.com/browse/RPL-984
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10325
    https://www.debian.org/security/2007/dsa-1256

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High