← Back

Gnome

gnome

349 CVEs • 102 products

Products (102)

Click to collapse
Toggle
Glib
glib
Libsoup
libsoup
Evolution
evolution
Gdk Pixbuf
gdk-pixbuf
Gdm
gdm
Gtk
gtk
Epiphany
epiphany
Gdkpixbuf
gdkpixbuf
Screensaver
screensaver
Gnome Shell
gnome-shell
Librsvg
librsvg
Evince
evince
Pango
pango
Gpdf
gpdf
Libcroco
libcroco
Gvfs
gvfs
Gnome Keyring
gnome-keyring
Nautilus
nautilus
Balsa
balsa
Gnumeric
gnumeric
Yelp
yelp
Libgsf
libgsf
Gtk Vnc
gtk-vnc
Libgxps
libgxps
Gthumb
gthumb
File Roller
file-roller
Localsearch
localsearch
Eog
eog
Gtkhtml
gtkhtml
Gedit
gedit
Rhythmbox
rhythmbox
Power Manager
power_manager
Empathy
empathy
Libsocialweb
libsocialweb
Gcab
gcab
Shotwell
shotwell
Gnome Autoar
gnome-autoar
Esound
esound
Gnorpm
gnorpm
Bonobo
bonobo
Gnome Lokkit
gnome-lokkit
Batalla Naval
batalla_naval
Libvte4
libvte4
Libzvt2
libzvt2
Libgda2
libgda2
Dhcdbd
dhcdbd
Gconf
gconf
Ekiga
ekiga
Gnome Vfs
gnome-vfs
Gnome
gnome
Vinagre
vinagre
Libpeas
libpeas
Gmime
gmime
Tomboy
tomboy
Libgdata
libgdata
At Spi2 Atk
at-spi2-atk
Vala
vala
Byzanz
byzanz
Eye Of Gnome
eye_of_gnome
Gnome Session
gnome-session
Librest
librest
Seahorse
seahorse
Gnome Desktop
gnome-desktop
Evolution Ews
evolution-ews
Dia
dia
Orca
orca
Geary
geary
Gupnp
gupnp
Libgrss
libgrss
Libgfbgraph
libgfbgraph
Libgda
libgda
Libzapojit
libzapojit
Evolution Rss
evolution-rss
Grilo
grilo
Ocrfeeder
ocrfeeder
Caribou
caribou
Anjuta
anjuta
Tracker Miners
tracker_miners
Glade
glade
Gnome Maps
gnome-maps

CVEs (349)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
11Debian
Easy Software ProductsGentoo+8 more
16Cups
Debian LinuxEnterprise Linux+13 more
Apr 16, 2026
Jan 27, 2005
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilit...Show more
Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888.Show less
11Debian
Easy Software ProductsGentoo+8 more
16Cups
Debian LinuxEnterprise Linux+13 more
Apr 16, 2026
Jan 27, 2005
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code,...Show more
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.Show less
2Debian
Gnome
2Debian Linux
Evolution
Apr 16, 2026
Jan 24, 2005
N/A· v4
9.8 CRITICAL· v3
7.2 HIGH· v2
Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation an...Show more
Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow.Show less
1Gnome
2Gdkpixbuf
Gtk
Apr 16, 2026
Oct 20, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Integer overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted ICO file.
1Gnome
2Gdkpixbuf
Gtk
Apr 16, 2026
Oct 20, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a certain color...Show more
Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a certain color string. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0688).Show less
1Gnome
2Gdkpixbuf
Gtk
Apr 16, 2026
Oct 20, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain n_col and cpp va...Show more
Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain n_col and cpp values that enable a heap-based buffer overflow. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0687).Show less
1Gnome
2Gdkpixbuf
Gtk
Apr 16, 2026
Oct 20, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The BMP image processor for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted BMP file.
3Gnome
RedhatSgi
5Enterprise Linux
Gdk PixbufGdkpixbuf+2 more
Apr 16, 2026
Apr 15, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
gdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed bitmap (BMP) file.
1Gnome
1Gdm
Apr 16, 2026
Nov 17, 2003
N/A· v4
N/A· v3
2.1 LOW· v2
GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not limit the number or duration of commands and uses a blocking socket connection, which allows attackers to cause a denial of service (resource exhaustion) b...Show more
GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not limit the number or duration of commands and uses a blocking socket connection, which allows attackers to cause a denial of service (resource exhaustion) by sending commands and not reading the results.Show less
1Gnome
1Gdm
Apr 16, 2026
Nov 17, 2003
N/A· v4
N/A· v3
2.1 LOW· v2
GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not restrict the size of input, which allows attackers to cause a denial of service (memory consumption).
1Gnome
1Gtkhtml
Apr 16, 2026
Sep 17, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
gtkhtml before 1.1.10, as used in Evolution, allows remote attackers to cause a denial of service (crash) via a malformed message that causes a null pointer dereference.
2Gnome
Redhat
4Enterprise Linux
GdmKdebase+1 more
Apr 16, 2026
Aug 27, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) via a short authorization key name.
2Gnome
Redhat
4Enterprise Linux
GdmKdebase+1 more
Apr 16, 2026
Aug 27, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) when a chosen host expires, a different issue than CVE-2003-0549.
2Gnome
Redhat
2Gdm
Kdebase
Apr 16, 2026
Aug 27, 2003
N/A· v4
N/A· v3
2.1 LOW· v2
GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file.
1Gnome
1Batalla Naval
Apr 16, 2026
Jun 30, 2003
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string.
1Gnome
1Gtkhtml
Apr 16, 2026
May 5, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
GtkHTML, as included in Evolution before 1.2.4, allows remote attackers to cause a denial of service (crash) via certain malformed messages.
1Gnome
1Eog
Apr 16, 2026
Apr 2, 2003
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display.
1Gnome
1Gnome Lokkit
Apr 16, 2026
Mar 31, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
The iptables ruleset in Gnome-lokkit in Red Hat Linux 8.0 does not include any rules in the FORWARD chain, which could allow attackers to bypass intended access restrictions if packet forwarding is enabled.
2Gnome
Nalin Dahyabhai
2Gnome Terminal
Vte
Apr 16, 2026
Mar 3, 2003
N/A· v4
N/A· v3
6.8 MEDIUM· v2
VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the c...Show more
VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.Show less
4Gnome
MandrakesoftRedhat+1 more
4Bonobo
LinuxMandrake Linux+1 more
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Buffer overflow in efstools in Bonobo, when installed setuid, allows local users to execute arbitrary code via long command line arguments.