Every CVE Search/ Get API key

CVE-2005-2974

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF...

2.6 LowFix available

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference.

Exploit likelihood

2.58%Down 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.6

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference.

Record
CVE-2005-2974
CVSS 2.0
2.6 LowAV:N/AC:H/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference.

Record
CVE-2005-2974
Updated
2026-11-02
EUVDEUVD-2005-2974 No score

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference.

Record
EUVD-2005-2974
Updated
2026-11-03
GitHub AdvisoriesGHSA-mj64-44v8-gvpx No score

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF...

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference.

Record
GHSA-mj64-44v8-gvpx
Updated
2026-11-02
OSV No score

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference.

Record
CVE-2005-2974
Updated
2026-11-02
OSVDEBIAN-CVE-2005-2974 No score

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference.

Record
DEBIAN-CVE-2005-2974
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
giflib
Debian:12
 before 4.1.4-1
4.1.4-1
giflib
Debian:13
 before 4.1.4-1
4.1.4-1
giflib
Debian:14
 before 4.1.4-1
4.1.4-1
libungif4
Debian:3.0
 before 4.1.0b1-2woody1, plus listed versions
4.1.0b1-2
4.1.0b1-2woody1
libungif4
Debian:3.1
 before 4.1.3-2sarge1, plus listed versions
4.1.3-2
4.1.3-2sarge1
libungif
Red Hat:enterprise_linux:3::as
 before 0:4.1.0-15.el3.3
0:4.1.0-15.el3.3
libungif-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:4.1.0-15.el3.3
0:4.1.0-15.el3.3
libungif-devel
Red Hat:enterprise_linux:3::as
 before 0:4.1.0-15.el3.3
0:4.1.0-15.el3.3
libungif
Red Hat:enterprise_linux:3::desktop
 before 0:4.1.0-15.el3.3
0:4.1.0-15.el3.3
libungif-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:4.1.0-15.el3.3
0:4.1.0-15.el3.3
Show 33 moreShow less
Affected packages
PackageAffectedFixed
libungif-devel
Red Hat:enterprise_linux:3::desktop
 before 0:4.1.0-15.el3.3
0:4.1.0-15.el3.3
libungif
Red Hat:enterprise_linux:3::es
 before 0:4.1.0-15.el3.3
0:4.1.0-15.el3.3
libungif-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:4.1.0-15.el3.3
0:4.1.0-15.el3.3
libungif-devel
Red Hat:enterprise_linux:3::es
 before 0:4.1.0-15.el3.3
0:4.1.0-15.el3.3
libungif
Red Hat:enterprise_linux:3::ws
 before 0:4.1.0-15.el3.3
0:4.1.0-15.el3.3
libungif-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:4.1.0-15.el3.3
0:4.1.0-15.el3.3
libungif-devel
Red Hat:enterprise_linux:3::ws
 before 0:4.1.0-15.el3.3
0:4.1.0-15.el3.3
libungif
Red Hat:enterprise_linux:4::as
 before 0:4.1.3-1.el4.2
0:4.1.3-1.el4.2
libungif-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:4.1.3-1.el4.2
0:4.1.3-1.el4.2
libungif-devel
Red Hat:enterprise_linux:4::as
 before 0:4.1.3-1.el4.2
0:4.1.3-1.el4.2
libungif-progs
Red Hat:enterprise_linux:4::as
 before 0:4.1.3-1.el4.2
0:4.1.3-1.el4.2
libungif
Red Hat:enterprise_linux:4::desktop
 before 0:4.1.3-1.el4.2
0:4.1.3-1.el4.2
libungif-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:4.1.3-1.el4.2
0:4.1.3-1.el4.2
libungif-devel
Red Hat:enterprise_linux:4::desktop
 before 0:4.1.3-1.el4.2
0:4.1.3-1.el4.2
libungif-progs
Red Hat:enterprise_linux:4::desktop
 before 0:4.1.3-1.el4.2
0:4.1.3-1.el4.2
libungif
Red Hat:enterprise_linux:4::es
 before 0:4.1.3-1.el4.2
0:4.1.3-1.el4.2
libungif-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:4.1.3-1.el4.2
0:4.1.3-1.el4.2
libungif-devel
Red Hat:enterprise_linux:4::es
 before 0:4.1.3-1.el4.2
0:4.1.3-1.el4.2
libungif-progs
Red Hat:enterprise_linux:4::es
 before 0:4.1.3-1.el4.2
0:4.1.3-1.el4.2
libungif
Red Hat:enterprise_linux:4::ws
 before 0:4.1.3-1.el4.2
0:4.1.3-1.el4.2
libungif-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:4.1.3-1.el4.2
0:4.1.3-1.el4.2
libungif-devel
Red Hat:enterprise_linux:4::ws
 before 0:4.1.3-1.el4.2
0:4.1.3-1.el4.2
libungif-progs
Red Hat:enterprise_linux:4::ws
 before 0:4.1.3-1.el4.2
0:4.1.3-1.el4.2
giflib
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.1.3-7.1.el5_3.1
0:4.1.3-7.1.el5_3.1
giflib-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.1.3-7.1.el5_3.1
0:4.1.3-7.1.el5_3.1
giflib-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.1.3-7.1.el5_3.1
0:4.1.3-7.1.el5_3.1
giflib
Red Hat:enterprise_linux:5::client
 before 0:4.1.3-7.1.el5_3.1
0:4.1.3-7.1.el5_3.1
giflib-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:4.1.3-7.1.el5_3.1
0:4.1.3-7.1.el5_3.1
giflib-utils
Red Hat:enterprise_linux:5::client
 before 0:4.1.3-7.1.el5_3.1
0:4.1.3-7.1.el5_3.1
giflib
Red Hat:enterprise_linux:5::server
 before 0:4.1.3-7.1.el5_3.1
0:4.1.3-7.1.el5_3.1
giflib-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:4.1.3-7.1.el5_3.1
0:4.1.3-7.1.el5_3.1
giflib-devel
Red Hat:enterprise_linux:5::server
 before 0:4.1.3-7.1.el5_3.1
0:4.1.3-7.1.el5_3.1
giflib-utils
Red Hat:enterprise_linux:5::server
 before 0:4.1.3-7.1.el5_3.1
0:4.1.3-7.1.el5_3.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-2974 is a low vulnerability (CVSS 2.6) in Libungif, published November 4, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.58%, the 85th percentile. Fixed in giflib 4.1.4-1.

References

Show 41 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open