1346 matches found
Vulnerability Spotlight: Multiple Gdk-Pixbuf Vulnerabilities
OverviewToday, Talos is disclosing the discovery of two remote code execution vulnerabilities which have been identified in the Gdk-Pixbuf Toolkit. This toolkit used in multiple desktop applications including Chromium, Firefox, GNOME thumbnailer, VLC and others. Exploiting this vulnerability allo...
Gdk-Pixbuf JPEG gdk_pixbuf__jpeg_image_load_increment Code Execution Vulnerability
Summary An exploitable heap overflow vulnerability exists in the gdkpixbufjpegimageloadincrement functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability. Tested...
Gdk-Pixbuf TIFF tiff_image_parse Code Execution Vulnerability
Summary An exploitable integer overflow vulnerability exists in the tiffimageparse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this...
gdk-pixbuf -- multiple vulnerabilities
TALOS reports: An exploitable integer overflow vulnerability exists in the tiffimageparse functionality. An exploitable heap-overflow vulnerability exists in the gdkpixbufjpegimageloadincrement functionality...
Oracle Linux 6 / 7 : firefox (ELSA-2017-2456)
The remote Oracle Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-2456 advisory. 52.3.0-3.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a...
firefox security update
52.3.0-3.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper update Todd Vierling orabug 19847484 52.3.0-3 - Fix for rhbz1470294 - bundling newer libffi for ppc platforms 52.3.0-2 - Update to 52.3.0 ESR b2...
gdk-pixbuf: Heap-based buffer overflow in the gdk_pixbuf_flip function
Heap-based buffer overflow in the gdkpixbufflip function in gdk-pixbuf-scale.c in gdk-pixbuf 2.30.x allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted BMP file...
MGASA-2017-0227 Updated gdk-pixbuf2.0 packages fix security vulnerability
The gdk-pixbuf2.0 package has been updated to version 2.36.7, which fixes integer overflows in the ico, bmp, and tiff decoder, as well as fixing other bugs...
Updated gdk-pixbuf2.0 packages fix security vulnerability
The gdk-pixbuf2.0 package has been updated to version 2.36.7, which fixes integer overflows in the ico, bmp, and tiff decoder, as well as fixing other bugs...
gdk-pixbuf integer overflow vulnerability (CNVD-2017-03889)
gdk-pixbuf is a toolkit for image loading and pixel buffer processing. An integer overflow vulnerability exists in the gdk-pixbuf io-ico.c file, which can be exploited by an attacker to construct a malicious file and trick an application into parsing it, which can crash the application or execute...
gdk-pixbuf integer overflow vulnerability (CNVD-2017-03888)
gdk-pixbuf is a toolkit for image loading and pixel buffer processing. An integer overflow vulnerability in the 'loadresources' function of the gdk-pixbuf io-icns.c file allows remote attackers to build malicious files that can be exploited to trick an application into parsing, which can crash th...
gdk-pixbuf denial of service vulnerability (CNVD-2017-03708)
gdk-pixbuf is a toolkit for image loading and pixel buffer processing. A denial of service vulnerability exists in the gdk-pixbuf gdk-pixbuf-thumbnailer.c file. An attacker can exploit this vulnerability to construct a malicious file and trick an application into parsing it, which can crash the...
gdk-pixbuf 'make_available_at_least' function denial of service vulnerability
gdk-pixbuf is a toolkit for image loading and pixel buffer processing. A security vulnerability in the gdk-pixbuf 'makeavailableatleast' function allows remote attackers to build malicious files that can be exploited to trick an application into parsing, which can crash the application or execute...
Null pointer dereference
gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash via vectors related to printing an error message...
Integer overflow
Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service segmentation fault and application crash via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations...
DEBIAN-CVE-2017-6313
Integer underflow in the loadresources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service out-of-bounds read and program crash via a crafted image entry size in an ICO file...
DEBIAN-CVE-2017-6312
Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service segmentation fault and application crash via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations...
CVE-2017-6311
gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash via vectors related to printing an error message...
CVE-2017-6312
Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service segmentation fault and application crash via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations...