Vulnerability Name:

CVE-2005-1046 (CCN-20064)

Assigned:2005-03-24
Published:2005-03-24
Updated:2018-10-19
Summary:Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file.
CVSS v3 Severity:7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Access
References:Source: CCN
Type: KDE Bug Tracking System
Bug 102328: Corrupt PCX files crashes gwenview

Source: MISC
Type: Vendor Advisory
http://bugs.kde.org/show_bug.cgi?id=102328

Source: MITRE
Type: CNA
CVE-2005-1046

Source: CCN
Type: RHSA-2005-393
kdelibs security update

Source: CCN
Type: SA14908
KDE kdelibs PCX Image Buffer Overflow Vulnerability

Source: SECUNIA
Type: Patch, Vendor Advisory
14908

Source: CCN
Type: SA28114
Sun Solaris Gimp Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
28114

Source: SUNALERT
Type: UNKNOWN
103170

Source: SUNALERT
Type: UNKNOWN
201320

Source: CCN
Type: Sun Alert ID: 103170
Multiple Security Vulnerabilities Within the GIMP Plugins

Source: CCN
Type: ASA-2008-011
Multiple Security Vulnerabilities Within the GIMP Plugins (Sun 103170)

Source: CCN
Type: NORTEL BULLETIN ID: 2008009107, Rev 1
Nortel Response to Sun Alert 201320 - Multiple Security Vulnerabilities Within the GIMP Plugins

Source: DEBIAN
Type: Patch, Vendor Advisory
DSA-714

Source: DEBIAN
Type: DSA-714
kdelibs -- several vulnerabilities

Source: CCN
Type: GLSA-200504-22
KDE kimgio: PCX handling buffer overflow

Source: CONFIRM
Type: UNKNOWN
http://www.kde.org/info/security/advisory-20050421-1.txt

Source: SUSE
Type: Patch, Vendor Advisory
SUSE-SA:2005:022

Source: REDHAT
Type: UNKNOWN
RHSA-2005:393

Source: FEDORA
Type: UNKNOWN
FLSA:178606

Source: BID
Type: UNKNOWN
13096

Source: CCN
Type: BID-13096
KDE PCX Image File Handling Buffer Overflow Vulnerability

Source: CCN
Type: BID-13098
GwenView Multiple Unspecified Image Handling Heap-Based Memory Corruption Vulnerabilities

Source: CCN
Type: USN-114-1
kimgio vulnerability

Source: CCN
Type: USN-114-2
Fixed packages for USN-114-1

Source: VUPEN
Type: UNKNOWN
ADV-2005-0331

Source: VUPEN
Type: UNKNOWN
ADV-2007-4241

Source: XF
Type: UNKNOWN
kde-kimgio-bo(20064)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:11081

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:5802

Source: SUSE
Type: SUSE-SR:2005:012
SUSE Security Summary Report

Source: SUSE
Type: SUSE-SR:2005:013
SUSE Security Summary Report

Vulnerable Configuration:Configuration 1:
  • cpe:/o:kde:kde:3.4.0:*:*:*:*:*:*:*

  • Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:*:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20051046
    V
    CVE-2005-1046
    2015-11-16
    oval:org.mitre.oval:def:11081
    V
    Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file.
    2013-04-29
    oval:org.mitre.oval:def:5802
    V
    PCX Plugin of Gimp Vulnerability
    2008-10-20
    oval:com.redhat.rhsa:def:20050393
    P
    RHSA-2005:393: kdelibs security update (Important)
    2005-05-17
    oval:org.debian:def:714
    V
    several vulnerabilities
    2005-04-26
    BACK
    kde kde 3.4.0