CVE-2012-0828

CVE-2012-0828: A heap-based buffer overflow in Xchat-WDK before 1499-4 (Xchat 2.8.6 on Maemo) could allow remote attackers to crash the client or execute arbitrary code via a UTF-8 line from the server containing characters outside the BMP.

CVE-2005-2975

CVE-2005-2975 affects the gdk-pixbuf XPM image reader in GTK+ (io-xpm.c): vulnerable in GTK+ builds prior to 2.8.7 to denial-of-service via a crafted XPM image with many colors (infinite loop). Remediation: upgrade to GTK+ 2.8.7 or apply the upstream security update/version referenced by the advi...

CVE-2004-0783

CVE-2004-0783 describes a stack-based buffer overflow in xpm_extract_color (io-xpm.c) within the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and in gdk-pixbuf before 0.22. This can allow remote attackers to execute arbitrary code via a crafted color string. The Initial Description confir...

CVE-2004-0788

CVE-2004-0788 describes an integer overflow in the ICO image loader of GdkPixbuf/GTK+ (gdk-pixbuf before 0.22 and gtk2 before 2.2.4). A crafted ICO file can cause a denial of service (remote crash) on vulnerable applications. Connected sources also reference related ICO/XPM loaders and other imag...

CVE-2005-2976

CVE-2005-2976 describes an integer overflow in io-xpm.c of gdk-pixbuf 0.22.0 used by GTK+ (pre-2.8.7). An XPM image with large height/width/color values can crash the process or allow arbitrary code execution. The issue is caused by overflow in XPM parsing. Affected product: gdk-pixbuf/GTK+ up to...

CVE-2004-0753

The vulnerability CVE-2004-0753 affects the BMP image processing path in gdk-pixbuf (before 0.22) and GTK+ gtk2 (before 2.2.4), where a crafted BMP file can trigger an infinite loop and cause a remote denial of service. Public records from multiple advisories corroborate affected packages and pro...

CVE-2005-0372

Summary (CVE-2005-0372) : A directory traversal vulnerability in gftp for GTK+ up to version 2.0.17 allows remote FTP servers to read arbitrary files via ".." sequences returned from LIST. The issue affects gftp and is documented under CVE-2005-0372; multiple advisories (Red Hat/CentOS/Fedora) no...

CVE-2004-0782

CVE-2004-0782: Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the GTK+ XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and in gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain n_col and cpp values that trigger a heap-based buffer overflow. The GT...

CVE-2014-1949

CVE-2014-1949 affects GTK+ 3.10.9 and earlier used by cinnamon-screensaver, gnome-screensaver, and similar apps. The vulnerability arises from the popup menu implementation in GtkWindow, allowing a physically proximate attacker to bypass the lock screen by pressing the menu button. Several connec...

CVE-2007-0010

CVE-2007-0010 affects GTK+ gtk2 (GIMP Toolkit) where the GdkPixbufLoader could crash when processing a malformed image, causing a DoS. The issue is addressed by security updates across GTK2 packages (e.g., Red Hat RHSA-2007:0019, SuSE/SUSE9 updates, Ubuntu USN-415-1). Affected products are gtk2 (...

CVE-2010-4831

CVE-2010-4831 describes an untrusted search path vulnerability in GTK+ on Windows: the gdkinput-win32.c code accepts a Trojan horse Wintab32.dll in the current working directory, enabling local privilege escalation. Affected: GTK+ before 2.21.8 (Windows build). Root cause is loading a DLL from th...

CVE-2010-0732

The CVE-2010-0732 issue affects GTK+ up to 2.18.5 (as used in gnome-screensaver up to 2.28.1). It arises from implicit paints on GDK_WINDOW_FOREIGN windows, triggering an X error that can allow physically proximate attackers to bypass screen locking by repeatedly pressing Enter. Affected componen...

CVE-2005-0891

The CVE-2005-0891 issue is a double-free vulnerability in GTK+-related BMP handling (gdk-pixbuf/gtk2) that can crash applications (DoS). Public disclosures tie the flaw to BMP processing in GTK+ gdk-pixbuf, with Red Hat/CentOS advisories RHSA-2005:343 and RHSA-2005:344 and related Ubuntu/Fedora/N...

CVE-2010-4833

CVE-2010-4833 affects GTK+ on Windows and is an untrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c. GTK+ versions before 2.24.0 allow local users to gain privileges by placing a Trojan horse uxtheme.dll in the current working directory. This is a separate issue from CVE-...

CVE-2001-0084

The CVE-2001-0084 issue affects the GTK+ library, where the GTK_MODULES environment variable lets local users specify arbitrary modules. If GTK+ is used by a setuid/setgid program, this can let local users gain privileges. Reports from PT-2001-1319 describe GTK+ (affected versions not specified) ...