CVE-2005-0654

gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of service (application crash) via the image descriptor (1) height or (2) width fields set to zero.

• http://marc.info/?l=bugtraq&m=110995346018830&w=2Exploit, Mailing List, Third Party Advisory
• http://marc.info/?l=bugtraq&m=110995346018830&w=2Exploit, Mailing List, Third Party Advisory

Published

May 2, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0648Multiple vulnerabilities in Pixel-Apes SafeHTML before 1.3.0…
• CVE-2005-0649Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to …
• CVE-2005-0650Multiple cross-site scripting (XSS) vulnerabilities in Proje…
• CVE-2005-0651Multiple SQL injection vulnerabilities in ProjectBB 0.4.5.1 …
• CVE-2005-0652Unknown vulnerability in HP OpenVMS VAX 7.x and 6.x and Open…
• CVE-2005-0653phpMyAdmin 2.6.1 does not properly grant permissions on tabl…
• CVE-2005-0655auraCMS 1.5 allows remote attackers to obtain sensitive info…
• CVE-2005-0656Multiple cross-site scripting (XSS) vulnerabilities in auraC…
• CVE-2005-0657Directory traversal vulnerability in Computalynx CProxy 3.3.…
• CVE-2005-0658SQL injection vulnerability in a third party extension to TY…
• CVE-2005-0659phpBB 2.0.13 and earlier allows remote attackers to obtain s…
• CVE-2005-0660Multiple cross-site scripting (XSS) vulnerabilities in D-For…