1201 matches found
gdk-pixbuf -- multiple vulnerabilities
TALOS reports: An exploitable integer overflow vulnerability exists in the tiffimageparse functionality. An exploitable heap-overflow vulnerability exists in the gdkpixbufjpegimageloadincrement functionality...
Gdk-Pixbuf TIFF tiff_image_parse Code Execution Vulnerability
Summary An exploitable integer overflow vulnerability exists in the tiffimageparse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this...
Gdk-Pixbuf JPEG gdk_pixbuf__jpeg_image_load_increment Code Execution Vulnerability
Summary An exploitable heap overflow vulnerability exists in the gdkpixbufjpegimageloadincrement functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability. Tested...
PT-2018-5197
Name of the Vulnerable Software and Affected Versions Gnome gdk-pixbuf versions 2.36.8 and older Description The issue is related to several integer overflows in the gif get lzw function, which can result in memory corruption and potentially allow code execution. Recommendations For versions 2.36...
gdk-pixbuf: Heap-based buffer overflow in the gdk_pixbuf_flip function
Heap-based buffer overflow in the gdkpixbufflip function in gdk-pixbuf-scale.c in gdk-pixbuf 2.30.x allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted BMP file...
PT-2017-15584
Name of the Vulnerable Software and Affected Versions Gdk-Pixbuf version 2.36.6 Description A heap overflow issue exists in the gdk pixbuf jpeg image load increment functionality, allowing remote code execution through a specially crafted jpeg file. An attacker can trigger this issue by sending a...
PT-2017-15589
Name of the Vulnerable Software and Affected Versions Gdk-Pixbuf version 2.36.6 Description An exploitable integer overflow issue exists in the tiff image parse functionality when compiled with Clang. A specially crafted tiff file can cause a heap-overflow, resulting in remote code execution. An...
gdk-pixbuf denial of service vulnerability (CNVD-2017-03708)
gdk-pixbuf is a toolkit for image loading and pixel buffer processing. A denial of service vulnerability exists in the gdk-pixbuf gdk-pixbuf-thumbnailer.c file. An attacker can exploit this vulnerability to construct a malicious file and trick an application into parsing it, which can crash the...
gdk-pixbuf 'make_available_at_least' function denial of service vulnerability
gdk-pixbuf is a toolkit for image loading and pixel buffer processing. A security vulnerability in the gdk-pixbuf 'makeavailableatleast' function allows remote attackers to build malicious files that can be exploited to trick an application into parsing, which can crash the application or execute...
gdk-pixbuf integer overflow vulnerability (CNVD-2017-03888)
gdk-pixbuf is a toolkit for image loading and pixel buffer processing. An integer overflow vulnerability in the 'loadresources' function of the gdk-pixbuf io-icns.c file allows remote attackers to build malicious files that can be exploited to trick an application into parsing, which can crash th...
gdk-pixbuf integer overflow vulnerability (CNVD-2017-03889)
gdk-pixbuf is a toolkit for image loading and pixel buffer processing. An integer overflow vulnerability exists in the gdk-pixbuf io-ico.c file, which can be exploited by an attacker to construct a malicious file and trick an application into parsing it, which can crash the application or execute...
Code injection
The makeavailableatleast function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service infinite loop via a large TIFF file...
Integer overflow
Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service segmentation fault and application crash via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations...
Null pointer dereference
gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash via vectors related to printing an error message...
CVE-2017-6311
gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash via vectors related to printing an error message...
DEBIAN-CVE-2017-6312
Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service segmentation fault and application crash via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations...
CVE-2017-6312
Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service segmentation fault and application crash via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations...
CVE-2017-6312
Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service segmentation fault and application crash via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations...
CVE-2017-6311
gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash via vectors related to printing an error message...