Lucene search
Mozilla FoundationMFSA2015-88HistoryAug 11, 2015 - 12:00 a.m.
Heap overflow in gdk-pixbuf when scaling bitmap images — Mozilla
2015-08-1100:00:00
Mozilla Foundation
www.mozilla.org
20
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.013 Low
EPSS
Percentile
85.8%
Security researcher Gustavo Grieco reported a heap overflow in gdk-pixbuf affecting Linux systems using Gnome. This issue is triggered by the scaling of a malformed bitmap format image and results in a potentially exploitable crash.
Affected configurations
Node
mozillafirefoxRange<40
ORmozillafirefox_esrRange<38.2
ORmozillaseamonkeyRange<2.35
ORmozillathunderbirdRange<38.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox | lt | 40 | |
| firefox esr | lt | 38.2 | |
| seamonkey | lt | 2.35 | |
| thunderbird | lt | 38.2 |
Related
nessus
nessus
Fedora 22 : gdk-pixbuf2-2.31.6-1.fc22 (2015-13925)
2015-09-08 00:00:00
RHEL 6 / 7 : gdk-pixbuf2 (RHSA-2015:1694)
2015-09-01 00:00:00
openSUSE Security Update : gdk-pixbuf (openSUSE-2015-570)
2015-09-08 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2722-1)
2015-08-27 00:00:00
Mozilla Firefox Security Advisory (MFSA2015-88) - Linux
2021-11-11 00:00:00
openSUSE: Security Advisory for gdk-pixbuf (openSUSE-SU-2018:2287-1)
2018-08-10 00:00:00
prion
prion
Integer overflow
2015-08-16 01:59:00
ibm
ibm
debian
debian
[SECURITY] [DSA 3337-2] gdk-pixbuf security update
2015-12-17 05:40:28
[SECURITY] [DSA 3337-1] gdk-pixbuf security update
2015-08-18 13:37:18
[SECURITY] [DSA 3337-2] gdk-pixbuf security update
2015-12-17 05:40:28
fedora
fedora
[SECURITY] Fedora 21 Update: gdk-pixbuf2-2.31.6-1.fc21
2015-09-06 06:24:59
[SECURITY] Fedora 22 Update: mingw-gdk-pixbuf-2.31.6-1.fc22
2015-09-06 04:55:25
[SECURITY] Fedora 21 Update: mingw-gdk-pixbuf-2.31.6-1.fc21
2015-09-06 06:24:47
mageia
mageia
Updated gdk-pixbuf2.0 package fixes security vulnerability
2015-08-13 23:56:40
Updated thunderbird packages fix security vulnerabilities
2015-08-27 23:49:46
Updated firefox packages fixes security vulnerabilities
2015-08-11 23:22:53
cvelist
cvelist
CVE-2015-4491
2015-08-16 01:00:00
suse
suse
Security update for gdk-pixbuf (moderate)
2018-08-10 03:10:27
Security update for MozillaFirefox, mozilla-nss (important)
2015-09-10 17:10:07
Security update for MozillaFirefox, mozilla-nss (important)
2015-09-02 12:10:07
securityvulns
securityvulns
gdk-pixbuf buffer overflow
2015-08-24 00:00:00
[USN-2722-1] GDK-PixBuf vulnerability
2015-10-25 00:00:00
[SECURITY] [DSA 3337-1] gdk-pixbuf security update
2015-08-24 00:00:00
f5
f5
K76434343 : gdk-pixbuf vulnerability CVE-2015-4491
2017-09-13 00:00:00
ubuntu
ubuntu
GDK-PixBuf vulnerability
2015-08-26 00:00:00
Thunderbird vulnerabilities
2015-08-25 00:00:00
Ubufox update
2015-08-11 00:00:00
oraclelinux
oraclelinux
gdk-pixbuf2 security update
2015-08-31 00:00:00
thunderbird security update
2015-08-25 00:00:00
firefox security update
2015-08-11 00:00:00
ubuntucve
ubuntucve
CVE-2015-4491
2015-08-11 00:00:00
debiancve
debiancve
CVE-2015-4491
2015-08-16 01:59:19
freebsd
freebsd
gdk-pixbuf2 -- heap overflow and DoS
2015-07-12 00:00:00
mozilla -- multiple vulnerabilities
2015-08-11 00:00:00
cve
cve
CVE-2015-4491
2015-08-16 01:59:19
redhat
redhat
(RHSA-2015:1694) Moderate: gdk-pixbuf2 security update
2015-08-31 00:00:00
(RHSA-2015:1682) Important: thunderbird security update
2015-08-25 00:00:00
(RHSA-2015:1586) Critical: firefox security update
2015-08-11 00:00:00
slackware
slackware
[slackware-security] gdk-pixbuf2
2015-09-01 23:35:52
nvd
nvd
CVE-2015-4491
2015-08-16 01:59:19
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:07:34
Denial Of Service (DoS)
2019-05-02 05:18:06
Denial Of Service (DoS)
2019-05-02 05:18:07
centos
centos
gdk security update
2015-08-31 16:41:33
thunderbird security update
2015-08-25 22:25:27
firefox security update
2015-08-11 20:36:44
gentoo
gentoo
gdk-pixbuf: Multiple Vulnerabilities
2015-12-21 00:00:00
Mozilla Products: Multiple vulnerabilities
2016-05-31 00:00:00
osv
osv
gtk+2.0 - security update
2016-02-27 00:00:00
archlinux
archlinux
firefox: multiple issues
2015-08-12 00:00:00
kaspersky
kaspersky
KLA10643 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR
2015-08-11 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.013 Low
EPSS
Percentile
85.8%
Related for MFSA2015-88