The vulnerability of the Firefox browser, which allows a violator to trigger a service failure

The vulnerability of the gdk-pixbuf library in Firefox browsers stems from buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to cause a service failure by using a specially crafted Truevision TGA image...

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure or cause other effects

The vulnerability in the gdk-pixbuf library of Firefox exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects by using a specially crafted JPEG 2000 image...

SUSE SLED12 / SLES12 Security Update : gdk-pixbuf (SUSE-SU-2015:2195-2)

The gdk pixbuf library was updated to fix three security issues. These security issues were fixed : - CVE-2015-7673: Fix some more overflows scaling a gif bsc948791 - CVE-2015-4491: Check for overflow before allocating memory when scaling bsc942801 - CVE-2015-7673: Fix an overflow and DoS when...

SUSE-SU-2015:2195-1 Security update for gdk-pixbuf

The gdk pixbuf library was updated to fix three security issues. These security issues were fixed: - CVE-2015-7673: Fix some more overflows scaling a gif bsc948791 - CVE-2015-4491: Check for overflow before allocating memory when scaling bsc942801 - CVE-2015-7673: Fix an overflow and DoS when...

SUSE-SU-2015:2195-2 Security update for gdk-pixbuf

The gdk pixbuf library was updated to fix three security issues. These security issues were fixed: - CVE-2015-7673: Fix some more overflows scaling a gif bsc948791 - CVE-2015-4491: Check for overflow before allocating memory when scaling bsc942801 - CVE-2015-7673: Fix an overflow and DoS when...

Gentoo Security Advisory GLSA 201512-05

Gentoo Linux Local Security Checks GLSA 201512-05 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

GLSA-201512-05 : gdk-pixbuf: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201512-05 gdk-pixbuf: Multiple Vulnerabilities Three heap-based buffer overflow vulnerabilities have been discovered in gdk-pixbuf. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could...

gdk-pixbuf: Multiple Vulnerabilities

Background gdk-pixbuf is an image loading library for GTK+. Description Three heap-based buffer overflow vulnerabilities have been discovered in gdk-pixbuf. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted ima...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2015-08325)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in the gdk-pixbuf configuration of Mozilla Firefox versions prior to 43.0 on the Linux GNOME platform, which stems from the program failing to properly enable th...

Solaris 10 (sparc) : 151721-01 (deprecated)

GNOME 2.6.0: GDK-PixBuf library Patch. Date this patch was last updated by Sun : Dec/17/15 This plugin has been deprecated and either replaced with individual 151721 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled ...

[SECURITY] [DSA 3337-2] gdk-pixbuf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3337-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 17, 2015 https://www.debian.org/security/faq -...

DSA-3337-2 gdk-pixbuf - security update

Bulletin has no description...

CVE-2015-7217

The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted Truevision TGA image...

Heap overflow

The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted Truevision TGA image...

CVE-2015-7217

CVE-2015-7217 affects Mozilla Firefox before 43.0 on Linux GNOME. The gdk-pixbuf configuration incorrectly enables the TGA decoder , allowing a remote attacker to trigger a heap-based buffer overflow via a crafted Truevision TGA image, resulting in a denial of service. The description and related...

CVE-2015-7216

The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the JasPer decoder, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG 2000 image...

CVE-2015-7217

The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted Truevision TGA image...

UBUNTU-CVE-2015-7216

The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the JasPer decoder, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG 2000 image...

UBUNTU-CVE-2015-7217

The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted Truevision TGA image...

Linux file chooser crashes on malformed images due to flaws in Jasper library — Mozilla

Security researcher Gustavo Grieco reported that on Linux Gnome systems the dialog for choosing local files uses the operating system's gdk-pixbuf library to render thumbnails for image file types. This library supports various image decoders, and Grieco reported that the Jasper and TGA decoders...