Lucene search

K
mageiaGentoo FoundationMGASA-2016-0076
HistoryFeb 17, 2016 - 10:06 p.m.

Updated gnome-photos packages fix CVE-2013-7447

2016-02-1722:06:01
Gentoo Foundation
advisories.mageia.org
10

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.033 Low

EPSS

Percentile

91.3%

Updated gnome-photos package fixes security vulnerabilities: Due to a logic error, an attempt to allocate a large block of memory fails in create_surface_from_pixbuf, leading to a crash of gnome-photos (CVE-2013-7447). A similar potential issue in view_helper_draw() in src/gegl-gtk-view-helper.c has also been patched.

OSVersionArchitecturePackageVersionFilename
Mageia5noarchgnome-photos< 3.14.2-1.1gnome-photos-3.14.2-1.1.mga5

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.033 Low

EPSS

Percentile

91.3%