Out-of-bounds Read

Wireshark, previously known as Ethereal, is a network protocol analyzer, which is used to capture and browse the traffic running on a computer network. Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or...

Denial Of Service (DoS)

gtk2 is vulnerable to denial of service DoS attacks. The vulnerability exists through multiple integer overflow issues in the readbitmapfiledata function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service application crash via a negative 1 height or 2 widt...

SUSE SLES11 Security Update : gtk2 (SUSE-SU-2018:2470-1)

This update for gtk2 provides the following fixes: These security issues were fixed : - CVE-2017-6312: Prevent integer overflow that allowed context-dependent attackers to cause a denial of service segmentation fault and application crash via a crafted image entry offset in an ICO file bsc1027026...

SUSE-SU-2018:2470-1 Security update for gtk2

This update for gtk2 provides the following fixes: These security issues were fixed: - CVE-2017-6312: Prevent integer overflow that allowed context-dependent attackers to cause a denial of service segmentation fault and application crash via a crafted image entry offset in an ICO file bsc1027026....

SUSE SLES11 Security Update : gtk2 (SUSE-SU-2018:0467-1)

This update for gtk2 fixes the following issues: This security issue was fixed : - Add checks for multiplications at several locations to avoid mishandling memory. This allowed attackers to cause DoS or potentially RCE bsc1053417. Note that Tenable Network Security has extracted the preceding...

SUSE-SU-2018:0467-1 Security update for gtk2

This update for gtk2 fixes the following issues: This security issue was fixed: - Add checks for multiplications at several locations to avoid mishandling memory. This allowed attackers to cause DoS or potentially RCE bsc1053417...

GHSA-XGJ6-PGRM-X4R2 gtk2 vulnerable to Use of Externally-Controlled Format String

Format string vulnerability in the mdiaginitialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 aka Ruby/Gnome2 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter...

gtk2 vulnerable to Use of Externally-Controlled Format String

Format string vulnerability in the mdiaginitialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 aka Ruby/Gnome2 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter...

[SECURITY] Fedora 24 Update: gtk-vnc-0.7.0-1.fc24

gtk-vnc is a VNC viewer widget for GTK2. It is built using coroutines allowing it to be completely asynchronous while remaining single threaded...

[SECURITY] Fedora 25 Update: gtk-vnc-0.7.0-1.fc25

gtk-vnc is a VNC viewer widget for GTK2. It is built using coroutines allowing it to be completely asynchronous while remaining single threaded...

SUSE SLES11 Security Update : gtk2 (SUSE-SU-2016:2532-1)

This update for gtk2 fixes the following security issues : - CVE-2016-6352: Some crashes were fixed, including a out of bounds write in the OneLine32 function that could be used by attackers to crash GTK/GDK programs. - CVE-2013-7447: Avoid overflow when allocating a cairo pixbuf bsc966682. Note...

SUSE SLED12 / SLES12 Security Update : gtk2 (SUSE-SU-2016:2550-1)

This update for gtk2 fixes the following issues : - CVE-2013-7447: Avoid an overflow when allocating a cairo pixbuf bsc966682. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean an...

SUSE-SU-2016:2550-1 Security update for gtk2

This update for gtk2 fixes the following issues: - CVE-2013-7447: Avoid an overflow when allocating a cairo pixbuf bsc966682...

SUSE-SU-2016:2532-1 Security update for gtk2

This update for gtk2 fixes the following security issues: - CVE-2016-6352: Some crashes were fixed, including a out of bounds write in the OneLine32 function that could be used by attackers to crash GTK/GDK programs. - CVE-2013-7447: Avoid overflow when allocating a cairo pixbuf bsc966682...

openSUSE Security Update : gtk2 (openSUSE-2016-1117)

This gtk2 update to version 2.24.31 fixes the following issues : Security issues fixed : - CVE-2013-7447: Fixed integer overflow in image handling boo966682. Bugs fixed : - Changes from version 2.24.31 : + Backport many file chooser entry fixes and cleanups. + Don't crash if invisible files are...

openSUSE Security Update : gtk2 (openSUSE-2016-1118)

This gtk2 update to version 2.24.31 fixes the following issues : Security issues fixed : - CVE-2013-7447: Fixed integer overflow in image handling boo966682. Bugs fixed : - Changes from version 2.24.31 : + Backport many file chooser entry fixes and cleanups. + Don't crash if invisible files are...

Vulnerabilities of the Debian GNU/Linux operating system that allow a local malicious individual to compromise the accessibility of protected information

The gtk2-engines-pixbuf package on the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...

SUSE SLED11 / SLES11 Security Update : gtk2 (SUSE-SU-2016:0282-1)

This update for gtk2 fixes the following security issues : - CVE-2015-7552: various overflows, including heap overflow in flipping bmp files bsc958963 The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the preceding...

SUSE SLED11 / SLES11 Security Update : gtk2 (SUSE-SU-2015:1787-1)

gtk2 was updated to fix two security issues. These security issues were fixed : - CVE-2015-4491: Integer overflow in the makefiltertable function in pixops/pixops.c in gdk-pixbuf before 2.31.5, allowed remote attackers to execute arbitrary code or cause a denial of service heap-based buffer...

SUSE-SU-2015:1787-1 Security update for gtk2

gtk2 was updated to fix two security issues. These security issues were fixed: - CVE-2015-4491: Integer overflow in the makefiltertable function in pixops/pixops.c in gdk-pixbuf before 2.31.5, allowed remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overfl...