[SECURITY] [DLA 2043-1] gdk-pixbuf security update

Package : gdk-pixbuf Version : 2.31.1-2+deb8u8 CVE ID : CVE-2016-6352 CVE-2017-2870 CVE-2017-6312 CVE-2017-6313 CVE-2017-6314 Several issues in gdk-pixbuf, a library to handle pixbuf, have been found. CVE-2016-6352 fix for denial of service out-of-bounds write and crash via crafted dimensions in ...

DLA-2043-1 gdk-pixbuf - security update

Bulletin has no description...

PT-2019-6327

Name of the Vulnerable Software and Affected Versions GNOME gdk-pixbuf version 2.42.6 Description The issue is related to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12. This vulnerability can allow a...

CVE-2011-2897

gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw...

Buffer overflow

gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw...

CVE-2011-2897

gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw...

CVE-2011-2897

CVE-2011-2897 affects gdk-pixbuf through 2.31.1, where the GIF loader overflows a buffer during initialization of decompression tables due to an input validation flaw. The issue is documented with high/critical risk in the provided metrics (CVSS2/3.1). Red Hat, SUSE, and other entries reference t...

CVE-2011-2897

gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw...

CVE-2011-2897

gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw...

CVE-2011-2897

gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw...

CVE-2011-2897: Improper Input Validation

gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw...

PT-2019-6074 · Gnome +4 · Gdk-Pixbuf +4

Name of the Vulnerable Software and Affected Versions: gdk-pixbuf versions prior to 2.42.0 Description: A flaw in gdk-pixbuf can cause an integer wraparound leading to an out of bounds write when a crafted GIF image is loaded. This may allow an attacker to crash applications or potentially execut...

Ubuntu 16.04 LTS : GDK-PixBuf vulnerability (USN-3912-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3912-1 advisory. It was discovered that the GDK-PixBuf library did not properly handle certain BMP images. If an user or automated system were tricked into opening a specially...

Ubuntu: Security Advisory (USN-3912-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3912-1: GDK-PixBuf vulnerability

It was discovered that the GDK-PixBuf library did not properly handle certain BMP images. If an user or automated system were tricked into opening a specially crafted BMP file, a remote attacker could use this flaw to cause GDK-PixBuf to crash, resulting in a denial of service, or possibly execut...

USN-3912-1 gdk-pixbuf vulnerability

It was discovered that the GDK-PixBuf library did not properly handle certain BMP images. If an user or automated system were tricked into opening a specially crafted BMP file, a remote attacker could use this flaw to cause GDK-PixBuf to crash, resulting in a denial of service, or possibly execut...

CVE-2017-12447

GDK-PixBuf (gdk-pixbuf), possibly 2.32.2, used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, is affected by CVE-2017-12447. A crafted BMP/FILE_FOLDER could trigger a denial of service via stack corruption, with possible unspecified impact. The available sources consistently reference GdkPixBuf’s vuln...

UBUNTU-CVE-2017-12447

GdkPixBuf aka gdk-pixbuf, possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service stack corruption or possibly have unspecified other impact via a crafted file folder...

Denial Of Service (DoS)

gtk2 is vulnerable to denial of service DoS attacks. The vulnerability exists through multiple integer overflow issues in the readbitmapfiledata function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service application crash via a negative 1 height or 2 widt...

gdk-pixbuf2: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function

An exploitable heap overflow vulnerability exists in the gdkpixbufjpegimageloadincrement functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability...