Published: 10/03/2017 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent malicious users to cause a denial of service (segmentation fault and application crash) via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnome gdk-pixbuf
fedoraproject fedora 30
fedoraproject fedora 31
debian debian linux 8.0

Several security issues were fixed in GDK-PixBuf ...

It was discovered that multiple integer overflows in the GIF image loader in the GDK Pixbuf library may result in denial of service and potentially the execution of arbitrary code if a malformed image file is opened For the oldstable distribution (jessie), this problem has been fixed in version 2311-2+deb8u7 For the stable distribution (stretch ...

Debian Bug report logs - #856448 gdk-pixbuf: CVE-2017-6314: Infinite loop in io-tiffc with large size Package: src:gdk-pixbuf; Maintainer for src:gdk-pixbuf is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 1 Mar 2017 06:09:0 ...

Debian Bug report logs - #856445 gdk-pixbuf: CVE-2017-6313: Integer underflow in io-icnsc Package: src:gdk-pixbuf; Maintainer for src:gdk-pixbuf is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 1 Mar 2017 06:06:02 UTC Sever ...

Debian Bug report logs - #856444 gdk-pixbuf: CVE-2017-6312: Possible out-of-bounds read Package: src:gdk-pixbuf; Maintainer for src:gdk-pixbuf is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 1 Mar 2017 05:57:02 UTC Severity ...

An out-of-bounds read flaw was found in the way GdkPixbuf handled ICO format files A maliciously crafted ICO file could cause the application using GdkPixbuf to crash ...

CWE-190 https://bugzilla.gnome.org/show_bug.cgi?id=779012 http://www.openwall.com/lists/oss-security/2017/02/26/1 http://www.openwall.com/lists/oss-security/2017/02/21/4 http://mov.sx/2017/02/21/bug-hunting-gdk-pixbuf.html http://www.securityfocus.com/bid/96779 https://security.gentoo.org/glsa/201709-08 https://lists.debian.org/debian-lts-announce/2019/12/msg00025.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJF5ARFOX4BFUK6YCBKGAKBQYECO3AI2/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSAZ6UCKKXC5VOWXGWQHOX2ZBLLATIOT/https://usn.ubuntu.com/3532-1/https://nvd.nist.gov

CVE-2017-6312

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect