CVE-2005-3350
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary...
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write.
Exploit likelihood
What each source reports
NVD Score used
7.5
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write.
- Record
CVE-2005-3350- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write.
- Record
CVE-2005-3350- Updated
- 2026-11-02
EUVDEUVD-2005-3349 No score
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write.
- Record
EUVD-2005-3349- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mh2j-cpx3-ww24 No score
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary...
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write.
- Record
GHSA-mh2j-cpx3-ww24- Updated
- 2026-11-02
OSV No score
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write.
- Record
CVE-2005-3350- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-3350 No score
libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write.
- Record
DEBIAN-CVE-2005-3350- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
giflibDebian:12 |
before 4.1.4-1 | 4.1.4-1 |
giflibDebian:13 |
before 4.1.4-1 | 4.1.4-1 |
giflibDebian:14 |
before 4.1.4-1 | 4.1.4-1 |
libungif4Debian:3.0 From an advisory covering 2 CVEs |
before 4.1.0b1-2woody1, plus listed versions 4.1.0b1-2 |
4.1.0b1-2woody1 |
libungif4Debian:3.1 From an advisory covering 2 CVEs |
before 4.1.3-2sarge1, plus listed versions 4.1.3-2 |
4.1.3-2sarge1 |
libungifRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungif-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungif-develRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungifRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungif-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
Show 33 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libungif-develRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungifRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungif-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungif-develRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungifRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungif-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungif-develRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:4.1.0-15.el3.3 | 0:4.1.0-15.el3.3 |
libungifRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-progsRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungifRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-progsRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungifRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-progsRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungifRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
libungif-progsRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.1.3-1.el4.2 | 0:4.1.3-1.el4.2 |
giflibRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
giflib-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
giflib-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
giflibRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
giflib-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
giflib-utilsRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
giflibRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
giflib-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
giflib-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
giflib-utilsRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:4.1.3-7.1.el5_3.1 | 0:4.1.3-7.1.el5_3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3350 is a high vulnerability (CVSS 7.5) in Libungif, published November 4, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.42%, the 91st percentile. Fixed in giflib 4.1.4-1.
References
secunia.com/advisories/17508
osvdb.org/20471
secunia.com/advisories/17438
securityfocus.com/archive/1/428059/30/6300/threaded
secunia.com/advisories/17482
bugs.gentoo.org/show_bug.cgi?id=109997
Show 39 moreShow less
secunia.com/advisories/17442
securityfocus.com/bid/15299
secunia.com/advisories/34872
redhat.com/support/errata/RHSA-2005-828.html
secunia.com/advisories/17559
ubuntulinux.org/usn/usn-214-1
secunia.com/advisories/17488
redhat.com/support/errata/RHSA-2009-0444.html
redhat.com/archives/fedora-package-announce/2009-May/msg00771.html
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=171413
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9314
gentoo.org/security/en/glsa/glsa-200511-03.xml
sourceforge.net/project/shownotes.php?release_id=364493
vupen.com/english/advisories/2005/2295
secunia.com/advisories/17436
debian.org/security/2005/dsa-890
securityfocus.com/archive/1/428059/100/0/threaded
scary.beasts.org/security/CESA-2005-007.txt
securitytracker.com/id?1015149
secunia.com/advisories/17462
mandriva.com/security/advisories?name=MDKSA-2005:207
secunia.com/advisories/17497
secunia.com/advisories/35164
nvd.nist.gov/vuln/detail/CVE-2005-3350
github.com/advisories/GHSA-mh2j-cpx3-ww24
security-tracker.debian.org/tracker/CVE-2005-3350
access.redhat.com/errata/RHSA-2005:828
bugzilla.redhat.com/show_bug.cgi?id=171413
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_828.json
access.redhat.com/security/cve/CVE-2005-2974
bugzilla.redhat.com/show_bug.cgi?id=494826
cve.org/CVERecord?id=CVE-2005-2974
nvd.nist.gov/vuln/detail/CVE-2005-2974
access.redhat.com/security/cve/CVE-2005-3350
bugzilla.redhat.com/show_bug.cgi?id=494823
cve.org/CVERecord?id=CVE-2005-3350
access.redhat.com/errata/RHSA-2009:0444
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0444.json