SUSE SLED12 / SLES12 Security Update : gdk-pixbuf (SUSE-SU-2015:2195-1)

The gdk pixbuf library was updated to fix three security issues. These security issues were fixed : - CVE-2015-7673: Fix some more overflows scaling a gif bsc948791 - CVE-2015-4491: Check for overflow before allocating memory when scaling bsc942801 - CVE-2015-7673: Fix an overflow and DoS when...

CVE-2006-4808

Heap-based buffer overflow in loadertga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TGA image...

CVE-2006-4807

loadertga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service crash via a crafted TGA image that triggers an out-of-bounds memory read, a different issue than CVE-2006-4808...

gdk-pixbuf Denial of Service Vulnerability

gdk-pixbuf is a library used by Gtk. A denial of service vulnerability exists in gdk-pixbuf versions prior to 2.32.0. Allows remote attackers to cause a denial of service or execute arbitrary code via a crafted Truevision TGA file...

DEBIAN-CVE-2015-7673

io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash and possibly execute arbitrary code via a crafted Truevision TGA TARGA file...

CVE-2015-7673

io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash and possibly execute arbitrary code via a crafted Truevision TGA TARGA file...

Heap overflow

io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash and possibly execute arbitrary code via a crafted Truevision TGA TARGA file...

CVE-2015-7673

io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash and possibly execute arbitrary code via a crafted Truevision TGA TARGA file...

CVE-2015-7673

CVE-2015-7673 affects gdk-pixbuf prior to 2.32.0. io-tga.c uses heap memory after allocation fails while decoding Truevision TGA images, enabling a remote attacker to cause a denial of service (heap-based overflow) and potentially execute arbitrary code. Remediation: upgrade to 2.32.0 or newer (p...

CVE-2015-7673

io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash and possibly execute arbitrary code via a crafted Truevision TGA TARGA file...

Debian DSA-3378-1 : gdk-pixbuf - security update

Several vulnerabilities have been discovered in gdk-pixbuf, a toolkit for image loading and pixel buffer manipulation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2015-7673 Gustavo Grieco discovered a heap overflow in the processing of TGA images whi...

[USN-2767-1] GDK-PixBuf vulnerabilities

========================================================================== Ubuntu Security Notice USN-2767-1 October 13, 2015 gdk-pixbuf vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives...

Debian Security Advisory DSA 3378-1 (gdk-pixbuf - security update)

Several vulnerabilities have been discovered in gdk-pixbuf, a toolkit for image loading and pixel buffer manipulation. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-7673 Gustavo Grieco discovered a heap overflow in the processing of TGA images which...

Debian: Security Advisory (DSA-3378-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : GDK-PixBuf vulnerabilities (USN-2767-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2767-1 advisory. Gustavo Grieco discovered that the GDK-PixBuf library did not properly handle scaling tga image files, leading to a heap overflow. If a user or automated...

USN-2767-1: GDK-PixBuf vulnerabilities

Gustavo Grieco discovered that the GDK-PixBuf library did not properly handle scaling tga image files, leading to a heap overflow. If a user or automated system were tricked into opening a tga image file, a remote attacker could use this flaw to cause GDK-PixBuf to crash, resulting in a denial of...

USN-2767-1 gdk-pixbuf vulnerabilities

Gustavo Grieco discovered that the GDK-PixBuf library did not properly handle scaling tga image files, leading to a heap overflow. If a user or automated system were tricked into opening a tga image file, a remote attacker could use this flaw to cause GDK-PixBuf to crash, resulting in a denial of...

gdk-pixbuf2: multiple issues

CVE-2015-7673 denial of service It has been discovered that under certain circumstances while scaling a tga file a heap memory allocation may fail which is later used and leads to a denial of service. - CVE-2015-7673 heap buffer overflow It has been discovered that under certain circumstances...

FreeBSD : gdk-pixbuf2 -- head overflow and DoS (9272a5b0-6b40-11e5-bd7f-bcaec565249c)

reports : We found a heap overflow and a DoS in the gdk-pixbuf implementation triggered by the scaling of tga file. We found a heap overflow in the gdk-pixbuf implementation triggered by the scaling of gif file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Updated gdk-pixbuf2.0 packages fix security vulnerabilities

Updated gdk-pixbuf packages fix security vulnerabilities: Security researcher Gustavo Grieco reported a heap overflow in gdk-pixbuf before 2.32.0. This issue is triggered by the scaling of a malformed tga format image and results in a potentially exploitable crash CVE-2015-7673. Security research...