CVE-2015-4491

2015-08-1601:59:00

Debian Security Bug Tracker

security-tracker.debian.org

0.013 Low

EPSS

Percentile

85.7%

JSON

Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via crafted bitmap dimensions that are mishandled during scaling.

OSVersionArchitecturePackageVersionFilename
Debian12allgdk-pixbuf< 2.31.7-1gdk-pixbuf_2.31.7-1_all.deb
Debian11allgdk-pixbuf< 2.31.7-1gdk-pixbuf_2.31.7-1_all.deb
Debian10allgdk-pixbuf< 2.31.7-1gdk-pixbuf_2.31.7-1_all.deb
Debian999allgdk-pixbuf< 2.31.7-1gdk-pixbuf_2.31.7-1_all.deb
Debian13allgdk-pixbuf< 2.31.7-1gdk-pixbuf_2.31.7-1_all.deb
Debian12allgtk+2.0< 2.21.5-1gtk+2.0_2.21.5-1_all.deb
Debian11allgtk+2.0< 2.21.5-1gtk+2.0_2.21.5-1_all.deb
Debian10allgtk+2.0< 2.21.5-1gtk+2.0_2.21.5-1_all.deb
Debian999allgtk+2.0< 2.21.5-1gtk+2.0_2.21.5-1_all.deb
Debian13allgtk+2.0< 2.21.5-1gtk+2.0_2.21.5-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	gdk-pixbuf	< 2.31.7-1	gdk-pixbuf_2.31.7-1_all.deb
Debian	11	all	gdk-pixbuf	< 2.31.7-1	gdk-pixbuf_2.31.7-1_all.deb
Debian	10	all	gdk-pixbuf	< 2.31.7-1	gdk-pixbuf_2.31.7-1_all.deb
Debian	999	all	gdk-pixbuf	< 2.31.7-1	gdk-pixbuf_2.31.7-1_all.deb
Debian	13	all	gdk-pixbuf	< 2.31.7-1	gdk-pixbuf_2.31.7-1_all.deb
Debian	12	all	gtk+2.0	< 2.21.5-1	gtk+2.0_2.21.5-1_all.deb
Debian	11	all	gtk+2.0	< 2.21.5-1	gtk+2.0_2.21.5-1_all.deb
Debian	10	all	gtk+2.0	< 2.21.5-1	gtk+2.0_2.21.5-1_all.deb
Debian	999	all	gtk+2.0	< 2.21.5-1	gtk+2.0_2.21.5-1_all.deb
Debian	13	all	gtk+2.0	< 2.21.5-1	gtk+2.0_2.21.5-1_all.deb