Base Score

HIGH7.5

CVE-2005-0891

Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image.

VectorNETWORK

Published Bysecalert@redhat.com

Published DateMay 02, 2005, 04:00

Weakness Type (CWE):CWE-415

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Severity

HIGH

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

HIGH

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000958
http://secunia.com/advisories/17657
http://www.mandriva.com/security/advisories?name=MDKSA-2005:214
http://www.redhat.com/support/errata/RHSA-2005-343.html
http://www.redhat.com/support/errata/RHSA-2005-344.html
http://www.securityfocus.com/archive/1/419771/100/0/threaded
http://www.securityfocus.com/bid/12950
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9710

Base Score

HIGH7.5

Weakness Type (CWE):CWE-415

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Severity

HIGH

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

HIGH