CVE-2007-0010

The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context...

2.1 LowPublic exploitFix available

The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent attackers to cause a denial of service (crash) via a malformed image file.

Exploit likelihood

0.96%Down 3.7 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent attackers to cause a denial of service (crash) via a malformed image file.

Record: CVE-2007-0010
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent attackers to cause a denial of service (crash) via a malformed image file.

Record: CVE-2007-0010
Updated: 2026-11-02

EUVDEUVD-2007-0014 No score

The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent attackers to cause a denial of service (crash) via a malformed image file.

Record: EUVD-2007-0014
Updated: 2026-11-03

GitHub AdvisoriesGHSA-p8m8-7wqx-pmvj No score

The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context...

The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent attackers to cause a denial of service (crash) via a malformed image file.

Record: GHSA-p8m8-7wqx-pmvj
Updated: 2026-11-02

OSV No score

The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent attackers to cause a denial of service (crash) via a malformed image file.

Record: CVE-2007-0010
Updated: 2026-11-02

OSVDEBIAN-CVE-2007-0010 No score

The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent attackers to cause a denial of service (crash) via a malformed image file.

Record: DEBIAN-CVE-2007-0010
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10834-1 No score

gtk2-branding-upstream-2.24.33-1.9 on GA media

These are all security issues fixed in the gtk2-branding-upstream-2.24.33-1.9 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10834-1
Updated: 2026-11-02

Affected products

gnome gtk

Affected packages

Affected packages
Package	Affected	Fixed
`gtk+2.0` Debian:12	before 2.8.20-5	2.8.20-5
`gtk+2.0` Debian:13	before 2.8.20-5	2.8.20-5
`gtk+2.0` Debian:14	before 2.8.20-5	2.8.20-5
`gtk+2.0` Debian:3.1	before 2.6.4-3.2, plus listed versions 2.6.4-32.6.4-3.1	2.6.4-3.2
`gtk2` Red Hat:enterprise_linux:4::as	before 0:2.4.13-22	0:2.4.13-22
`gtk2-debuginfo` Red Hat:enterprise_linux:4::as	before 0:2.4.13-22	0:2.4.13-22
`gtk2-devel` Red Hat:enterprise_linux:4::as	before 0:2.4.13-22	0:2.4.13-22
`gtk2` Red Hat:enterprise_linux:4::desktop	before 0:2.4.13-22	0:2.4.13-22
`gtk2-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:2.4.13-22	0:2.4.13-22
`gtk2-devel` Red Hat:enterprise_linux:4::desktop	before 0:2.4.13-22	0:2.4.13-22

Show 7 moreShow less

Affected packages
Package	Affected	Fixed
`gtk2` Red Hat:enterprise_linux:4::es	before 0:2.4.13-22	0:2.4.13-22
`gtk2-debuginfo` Red Hat:enterprise_linux:4::es	before 0:2.4.13-22	0:2.4.13-22
`gtk2-devel` Red Hat:enterprise_linux:4::es	before 0:2.4.13-22	0:2.4.13-22
`gtk2` Red Hat:enterprise_linux:4::ws	before 0:2.4.13-22	0:2.4.13-22
`gtk2-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:2.4.13-22	0:2.4.13-22
`gtk2-devel` Red Hat:enterprise_linux:4::ws	before 0:2.4.13-22	0:2.4.13-22
`gtk2` openSUSE:Tumbleweed From an advisory covering 2 CVEs	before 2.24.33-1.9	2.24.33-1.9

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	GTK2 GDKPixBufLoader - Remote Denial of Service	2007-01-24

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-0010 is a low vulnerability (CVSS 2.1) in Gnome Gtk, published January 24, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.96%, the 61st percentile. Fixed in gtk+2.0 2.8.20-5.

References

Show 25 moreShow less