Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image.

Updated gtk2 packages that fix a double free vulnerability are now available.

This update has been rated as having important security impact by the Red Hat Security Response Team.

The gtk2 package contains the GIMP ToolKit (GTK+), a library for creating graphical user interfaces for the X Window System.

A bug was found in the way gtk2 processes BMP images. It is possible that a specially crafted BMP image could cause a denial of service attack on applications linked against gtk2. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-0891 to this issue.

Users of gtk2 are advised to upgrade to these packages, which contain a backported patch and is not vulnerable to this issue.

Updated gdk-pixbuf packages that fix a double free vulnerability are now available.

This update has been rated as having important security impact by the Red Hat Security Response Team.

The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment.

A bug was found in the way gdk-pixbuf processes BMP images. It is possible that a specially crafted BMP image could cause a denial of service attack on applications linked against gdk-pixbuf. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-0891 to this issue.

Users of gdk-pixbuf are advised to upgrade to these packages, which contain a backported patch and is not vulnerable to this issue.

Matthias Clasen discovered a Denial of Service vulnerability in the BMP image module of gdk. Processing a specially crafted BMP image with an application using gdk-pixbuf caused an allocated memory block to be free()'ed twice, leading to a crash of the application. However, it is believed that this cannot be exploited to execute arbitrary attacker provided code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A heap overflow vulnerability in the GTK+ gdk-pixbuf XPM image rendering library could allow for arbitrary code execution. This allows an attacker to provide a carefully crafted XPM image which could possibly allow for arbitrary code execution in the context of the user viewing the image. (CVE-2005-3186)

Ludwig Nussel discovered an integer overflow bug in the way gdk-pixbuf processes XPM images. An attacker could create a carefully crafted XPM file in such a way that it could cause an application linked with gdk-pixbuf to execute arbitrary code or crash when the file was opened by a victim. (CVE-2005-2976)

Ludwig Nussel also discovered an infinite-loop denial of service bug in the way gdk-pixbuf processes XPM images. An attacker could create a carefully crafted XPM file in such a way that it could cause an application linked with gdk-pixbuf to stop responding when the file was opened by a victim. (CVE-2005-2975)

The gtk+2.0 library also contains the same gdk-pixbuf code with the same vulnerability.

The Corporate Server 2.1 packages have additional patches to address CVE-2004-0782,0783,0788 (additional XPM/ICO image issues), CVE-2004-0753 (BMP image issues) and CVE-2005-0891 (additional BMP issues). These were overlooked on this platform with earlier updates.

The updated packages have been patched to correct these issues.

David Costanzo found a bug in the way GTK+ processes BMP images. It is possible that a specially crafted BMP image could cause a denial of service attack in applications linked against GTK+. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-0891 to this issue.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

David Costanzo found a bug in the way gdk-pixbuf processes BMP images.
It is possible that a specially crafted BMP image could cause a denial of service attack in applications linked against gdk-pixbuf. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-0891 to this issue.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A bug was discovered in the way that gdk-pixbuf processes BMP images which could allow for a specially crafted BMP to cause a Denial of Service attack on applications linked against gdk-pixbuf.

The updated packages have been patched to correct these issues.

A bug was discovered in the way that gtk+2.0 processes BMP images which could allow for a specially crafted BMP to cause a Denial of Service attack on applications linked against gtk+2.0.

The updated packages have been patched to correct these issues.

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:343 advisory.

    The gdk-pixbuf package contains an image loading library used with the     GNOME GUI desktop environment.

    A bug was found in the way gdk-pixbuf processes BMP images. It is possible     that a specially crafted BMP image could cause a denial of service attack     on applications linked against gdk-pixbuf. The Common Vulnerabilities and     Exposures project (cve.mitre.org) has assigned the name CAN-2005-0891 to     this issue.

    Users of gdk-pixbuf are advised to upgrade to these packages, which contain     a backported patch and is not vulnerable to this issue.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:344 advisory.

    The gtk2 package contains the GIMP ToolKit (GTK+), a library for creating     graphical user interfaces for the X Window System.

    A bug was found in the way gtk2 processes BMP images. It is possible     that a specially crafted BMP image could cause a denial of service attack     on applications linked against gtk2. The Common Vulnerabilities and     Exposures project (cve.mitre.org) has assigned the name CAN-2005-0891 to     this issue.

    Users of gtk2 are advised to upgrade to these packages, which contain     a backported patch and is not vulnerable to this issue.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
21807	CentOS 3 / 4 : gtk2 (CESA-2005:344)	Nessus	CentOS Local Security Checks	medium
21806	CentOS 3 / 4 : gdk-pixbuf (CESA-2005:343)	Nessus	CentOS Local Security Checks	medium
20494	Ubuntu 4.10 : gtk+2.0, gdk-pixbuf vulnerabilities (USN-108-1)	Nessus	Ubuntu Local Security Checks	medium
20446	Mandrake Linux Security Advisory : gdk-pixbuf (MDKSA-2005:214)	Nessus	Mandriva Local Security Checks	high
19640	Fedora Core 3 : gtk2-2.4.14-3.fc3 (2005-268)	Nessus	Fedora Local Security Checks	medium
19639	Fedora Core 3 : gdk-pixbuf-0.22.0-16.fc3 (2005-266)	Nessus	Fedora Local Security Checks	medium
18326	Fedora Core 2 : gtk2-2.4.14-2.fc2 (2005-267)	Nessus	Fedora Local Security Checks	medium
18325	Fedora Core 2 : gdk-pixbuf-0.22.0-12.fc2 (2005-265)	Nessus	Fedora Local Security Checks	medium
18004	Mandrake Linux Security Advisory : gdk-pixbuf (MDKSA-2005:069)	Nessus	Mandriva Local Security Checks	medium
18003	Mandrake Linux Security Advisory : gtk+2.0 (MDKSA-2005:068)	Nessus	Mandriva Local Security Checks	critical
17980	RHEL 4 : gdk-pixbuf (RHSA-2005:343)	Nessus	Red Hat Local Security Checks	high
17679	RHEL 4 : gtk2 (RHSA-2005:344)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2005-0891

high

Tenable Plugins

medium

medium

medium

high

medium

medium

medium

medium

medium

critical

high

high