CVE-2005-3350
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary...
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write.
Exploit likelihood
What each source reports
NVD Score used
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write.
- Record
CVE-2005-3350- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write.
- Record
CVE-2005-3350- Updated
- 2026-11-02
EUVDEUVD-2005-3349 No score
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write.
- Record
EUVD-2005-3349- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mh2j-cpx3-ww24 No score
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary...
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write.
- Record
GHSA-mh2j-cpx3-ww24- Updated
- 2026-11-02
OSV No score
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write.
- Record
CVE-2005-3350- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-3350 No score
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write.
- Record
DEBIAN-CVE-2005-3350- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
giflibDebian:12 |
before 4.1.4-1 | 4.1.4-1 |
giflibDebian:13 |
before 4.1.4-1 | 4.1.4-1 |
giflibDebian:14 |
before 4.1.4-1 | 4.1.4-1 |
libungif4Debian:3.0 |
before 4.1.0b1-2woody1, plus listed versions 4.1.0b1-2 |
4.1.0b1-2woody1 |
libungif4Debian:3.1 |
before 4.1.3-2sarge1, plus listed versions 4.1.3-2 |
4.1.3-2sarge1 |
libungifRed Hat:enterprise_linux:3::as |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungif-debuginfoRed Hat:enterprise_linux:3::as |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungif-develRed Hat:enterprise_linux:3::as |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungifRed Hat:enterprise_linux:3::desktop |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungif-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
Show 33 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libungif-develRed Hat:enterprise_linux:3::desktop |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungifRed Hat:enterprise_linux:3::es |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungif-debuginfoRed Hat:enterprise_linux:3::es |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungif-develRed Hat:enterprise_linux:3::es |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungifRed Hat:enterprise_linux:3::ws |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungif-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungif-develRed Hat:enterprise_linux:3::ws |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungifRed Hat:enterprise_linux:4::as |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-debuginfoRed Hat:enterprise_linux:4::as |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-develRed Hat:enterprise_linux:4::as |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-progsRed Hat:enterprise_linux:4::as |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungifRed Hat:enterprise_linux:4::desktop |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-develRed Hat:enterprise_linux:4::desktop |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-progsRed Hat:enterprise_linux:4::desktop |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungifRed Hat:enterprise_linux:4::es |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-debuginfoRed Hat:enterprise_linux:4::es |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-develRed Hat:enterprise_linux:4::es |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-progsRed Hat:enterprise_linux:4::es |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungifRed Hat:enterprise_linux:4::ws |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-develRed Hat:enterprise_linux:4::ws |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-progsRed Hat:enterprise_linux:4::ws |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
giflibRed Hat:enterprise_linux:5::client_workstation |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
giflib-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
giflib-develRed Hat:enterprise_linux:5::client_workstation |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
giflibRed Hat:enterprise_linux:5::client |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
giflib-debuginfoRed Hat:enterprise_linux:5::client |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
giflib-utilsRed Hat:enterprise_linux:5::client |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
giflibRed Hat:enterprise_linux:5::server |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
giflib-debuginfoRed Hat:enterprise_linux:5::server |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
giflib-develRed Hat:enterprise_linux:5::server |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
giflib-utilsRed Hat:enterprise_linux:5::server |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3350 is a high vulnerability (CVSS 7.5) in Libungif, published November 4, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.42%, the 91st percentile. Fixed in giflib 4.1.4-1.
References
secunia.com/advisories/17508
osvdb.org/20471
securityfocus.com/archive/1/428059/30/6300/threaded
bugs.gentoo.org/show_bug.cgi?id=109997
Show 39 moreShow less
redhat.com/support/errata/RHSA-2005-828.html
ubuntulinux.org/usn/usn-214-1
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=171413
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9314
gentoo.org/security/en/glsa/glsa-200511-03.xml
sourceforge.net/project/shownotes.php?release_id=364493
vupen.com/english/advisories/2005/2295
debian.org/security/2005/dsa-890
scary.beasts.org/security/CESA-2005-007.txt
securitytracker.com/id?1015149
mandriva.com/security/advisories?name=MDKSA-2005:207
nvd.nist.gov/vuln/detail/CVE-2005-3350
github.com/advisories/GHSA-mh2j-cpx3-ww24
security-tracker.debian.org/tracker/CVE-2005-3350
access.redhat.com/errata/RHSA-2005:828
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_828.json
cve.org/CVERecord?id=CVE-2005-2974