CVE-2017-2862

🗓️ 05 Sep 2017 18:00:00Reported by talosType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 303 Views

"CVE-2017-2862 - Heap overflow in Gdk-Pixbuf 2.36.6

Reporter	Title	Published	Views	Family All 64
FreeBSD	gdk-pixbuf -- multiple vulnerabilities	30 Aug 201700:00	–	freebsd
AlpineLinux	CVE-2017-2862	5 Sep 201718:00	–	alpinelinux
Cent OS	PackageKit, accountsservice, adwaita, appstream, at, atk, baobab, bolt, brasero, cairo, cheese, clutter, compat, control, dconf, devhelp, ekiga, empathy, eog, evince, evolution, file, flatpak, folks, fontconfig, freetype, fribidi, fwupd, fwupdate, gcr, gdk, gdm, gedit, geoclue2, geocode, gjs, glade, glib, glib2, glibmm24, gnome, gnote, gobject, gom, google, grilo, gsettings, gspell, gssdp, gstreamer1, gtk, gtk3, gtksourceview3, gucharmap, gupnp, gvfs, harfbuzz, json, libappstream, libchamplain, libcroco, libgdata, libgee, libgepub, libgexiv2, libgnomekbd, libgovirt, libgtop2, libgweather, libgxps, libical, libmediaart, libosinfo, libpeas, librsvg2, libsecret, libsoup, libwayland, libwnck3, mozjs52, mutter, nautilus, openchange, osinfo, pango, poppler, python2, rest, rhythmbox, seahorse, shotwell, sushi, totem, upower, vala, valadoc, vino, vte, vte291, wayland, webkitgtk4, xdg, yelp, zenity security update	15 Nov 201818:43	–	centos
Cloud Foundry	USN-3418-1: GDK-PixBuf vulnerabilities \| Cloud Foundry	21 Sep 201700:00	–	cloudfoundry
CNVD	Gdk-Pixbuf gdk_pixbuf__jpeg_image_load_increment function heap overflow vulnerability	6 Sep 201700:00	–	cnvd
Cvelist	CVE-2017-2862	5 Sep 201718:00	–	cvelist
Debian	[SECURITY] [DLA 1100-1] gdk-pixbuf security update	19 Sep 201723:09	–	debian
Debian	[SECURITY] [DSA 3978-1] gdk-pixbuf security update	18 Sep 201720:41	–	debian
Debian CVE	CVE-2017-2862	5 Sep 201718:00	–	debiancve
Tenable Nessus	Debian DLA-1100-1 : gdk-pixbuf security update	20 Sep 201700:00	–	nessus

NVD

Vulners

Node

gnome gdk-pixbufMatch2.36.6

Node

debian debian_linuxMatch8.0

[
  {
    "product": "Gdk-Pixbuf",
    "vendor": "GNOME",
    "versions": [
      {
        "status": "affected",
        "version": "2.36.6 commit: aba8d88798dfc2f3856ea0ddda14b06174bbb2bc libjpeg-turbo 1.5.2"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2017-0366
securityfocus	www.securityfocus.com/bid/100541
debian	www.debian.org/security/2017/dsa-3978

13 May 2026 00:24Current

7.8High risk

Vulners AI Score7.8

CVSS 26.8

CVSS 3.17.8

CVSS 38.8

EPSS0.04562

CWE-787