Lucene search

K
osvGoogleOSV:DLA-434-1
HistoryFeb 27, 2016 - 12:00 a.m.

gtk+2.0 - security update

2016-02-2700:00:00
Google
osv.dev
12

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

Gustavo Grieco discovered different security issues in Gtk+2.0’s
gdk-pixbuf.

  • CVE-2015-4491
    Heap overflow when processing BMP images which may allow to execute
    of arbitrary code via malformed images.
  • CVE-2015-7673
    Heap overflow when processing TGA images which may allow execute
    arbitrary code or denial of service (process crash) via malformed
    images.
  • CVE-2015-7674
    Integer overflow when processing GIF images which may allow to
    execute arbitrary code or denial of service (process crash) via
    malformed image.

For Debian 6 Squeeze, these issues have been fixed in gtk+2.0 version
2.20.1-2+deb6u2. We recommend you to upgrade your gtk+2.0 packages.

CPENameOperatorVersion
gtk+2.0eq2.20.1-2

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P