CVE-2005-2974

Description

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference.

2.6

CVSS

Severity: Low

CVSS 2.0 •

EPSS 4.88% Top 15%

Vendor Advisory securityfocus.com Vendor Advisory redhat.com Vendor Advisory ubuntulinux.org Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory gentoo.org Vendor Advisory securityfocus.com Vendor Advisory debian.org Vendor Advisory securityfocus.com Vendor Advisory securityfocus.com Vendor Advisory mandriva.com

Affected: n/a n/a

References

Link	Tags
http://secunia.com/advisories/17508	third party advisory
http://secunia.com/advisories/17438	third party advisory
http://www.securityfocus.com/archive/1/428059/30/6300/threaded	vendor advisory
http://secunia.com/advisories/17482	third party advisory
http://bugs.gentoo.org/show_bug.cgi?id=109997
http://secunia.com/advisories/17442	third party advisory
http://secunia.com/advisories/34872	third party advisory
http://www.redhat.com/support/errata/RHSA-2005-828.html	vendor advisory
http://secunia.com/advisories/17559	third party advisory
http://www.ubuntulinux.org/usn/usn-214-1	vendor advisory
http://secunia.com/advisories/17488	third party advisory
http://www.redhat.com/support/errata/RHSA-2009-0444.html	vendor advisory
https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00771.html	vendor advisory
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=171413
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10994	vdb entry signature
http://www.gentoo.org/security/en/glsa/glsa-200511-03.xml	vendor advisory
http://sourceforge.net/project/shownotes.php?release_id=364493
http://www.securityfocus.com/advisories/9636	vendor advisory
http://www.vupen.com/english/advisories/2005/2295	vdb entry
http://secunia.com/advisories/17436	third party advisory
http://www.debian.org/security/2005/dsa-890	vendor advisory
http://www.securityfocus.com/archive/1/428059/100/0/threaded	vendor advisory
http://scary.beasts.org/security/CESA-2005-007.txt
http://securitytracker.com/id?1015149	vdb entry
http://www.securityfocus.com/advisories/9637	vendor advisory
http://www.securityfocus.com/bid/15304	vdb entry
http://www.osvdb.org/20470	vdb entry
http://secunia.com/advisories/17462	third party advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:207	vendor advisory
http://secunia.com/advisories/17497	third party advisory
http://secunia.com/advisories/35164	third party advisory

Frequently Asked Questions

What is the severity of CVE-2005-2974?: CVE-2005-2974 has been scored as a low severity vulnerability.
How to fix CVE-2005-2974?: To fix CVE-2005-2974, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2005-2974 being actively exploited in the wild?: It is possible that CVE-2005-2974 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~5% probability that this vulnerability will be exploited by malicious actors in the next 30 days.