CVE-2004-0788: Gnome Gdkpixbuf

Medium severity, CVSS 5.0. EPSS: 5.9% chance of exploitation in the next 30 days.

Integer overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted ICO file.

Affected products

• Gnome Gdkpixbuf: version 0.17 only; version 0.18 only; version 0.20 only; version 0.22 only
• Gnome Gtk: from 2.0.0, before 2.2.4 (fixed in 2.2.4)

Published 2004-10-20. Last modified 2026-06-16.