The BMP image processor for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted BMP file.
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gdkpixbuf | Gnome | 0.17 (including) | 0.17 (including) |
| Gdkpixbuf | Gnome | 0.18 (including) | 0.18 (including) |
| Gdkpixbuf | Gnome | 0.20 (including) | 0.20 (including) |
| Gdkpixbuf | Gnome | 0.22 (including) | 0.22 (including) |
| Gtk | Gnome | 2.0.0 (including) | 2.2.4 (excluding) |