CVE-2004-0788: Integer overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows r...

Security readout for executives and security teams

This is an old image-handling bug. A specially crafted Windows icon file could crash applications that used vulnerable gdk-pixbuf or GTK2 ICO decoding. The documented impact is denial of service, not data theft or code execution. Business urgency is mainly for legacy Linux systems or embedded products still carrying these outdated libraries. Exposure is most likely in legacy Linux distributions, appliances, or applications that still use vulnerable gdk-pixbuf or GTK2 versions and process untrusted ICO files. Modern supported distributions are likely patched, but verify inherited or embedded packages. Treat this as a legacy hygiene issue unless vulnerable software is still exposed to untrusted image input. Prioritize remediation on internet-facing, shared desktop, document-processing, or appliance environments where crashes affect availability. Mitigation focus: Inventory systems for gdk-pixbuf before 0.22 and gtk2 before 2.2.4.; Apply applicable vendor updates from the relevant Linux distribution advisory.; Retire or isolate unsupported systems that cannot receive package updates..

Prepared

Jun 30, 2026, 02:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.