Vulnerability Description
gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of service (application crash) via the image descriptor (1) height or (2) width fields set to zero.
CVSS Score
5.0
MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gimp | Gimp | 2.0.5 |
References
- http://marc.info/?l=bugtraq&m=110995346018830&w=2ExploitMailing ListThird Party Advisory
- http://marc.info/?l=bugtraq&m=110995346018830&w=2ExploitMailing ListThird Party Advisory
FAQ
What is CVE-2005-0654?
CVE-2005-0654 is a vulnerability with a CVSS score of 5.0 (MEDIUM). gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of service (application crash) via the image descriptor (1) height or (2) width fields set...
How severe is CVE-2005-0654?
CVE-2005-0654 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-0654?
Check the references section above for vendor advisories and patch information. Affected products include: Gimp Gimp.