[USN-2722-1] GDK-PixBuf vulnerability

Severity Medium

Affected Packages 6

CVEs 1

GDK-PixBuf could be made to crash or run programs as your login if it opened a specially crafted file.

Gustavo Grieco discovered that GDK-PixBuf incorrectly handled scaling
bitmap images. If a user or automated system were tricked into opening a
BMP image file, a remote attacker could use this flaw to cause GDK-PixBuf
to crash, resulting in a denial of service, or possibly execute arbitrary
code.

Package	Affected Version
pkg:deb/ubuntu/libgdk-pixbuf2.0-doc?distro=trusty	< 2.30.7-0ubuntu1.1
pkg:deb/ubuntu/libgdk-pixbuf2.0-dev?distro=trusty	< 2.30.7-0ubuntu1.1
pkg:deb/ubuntu/libgdk-pixbuf2.0-common?distro=trusty	< 2.30.7-0ubuntu1.1
pkg:deb/ubuntu/libgdk-pixbuf2.0-0?distro=trusty	< 2.30.7-0ubuntu1.1
pkg:deb/ubuntu/libgdk-pixbuf2.0-0-udeb?distro=trusty	< 2.30.7-0ubuntu1.1
pkg:deb/ubuntu/gir1.2-gdkpixbuf-2.0?distro=trusty	< 2.30.7-0ubuntu1.1

ID

USN-2722-1

Severity

medium

URL

https://ubuntu.com/security/notices/USN-2722-1

Published

2015-08-26T14:10:33
(9 years ago)

Modified

2015-08-26T14:10:33
(9 years ago)

Other Advisories

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:deb/ubuntu/libgdk-pixbuf2.0-doc?distro=trusty	ubuntu	libgdk-pixbuf2.0-doc	< 2.30.7-0ubuntu1.1	trusty
Affected	pkg:deb/ubuntu/libgdk-pixbuf2.0-dev?distro=trusty	ubuntu	libgdk-pixbuf2.0-dev	< 2.30.7-0ubuntu1.1	trusty
Affected	pkg:deb/ubuntu/libgdk-pixbuf2.0-common?distro=trusty	ubuntu	libgdk-pixbuf2.0-common	< 2.30.7-0ubuntu1.1	trusty
Affected	pkg:deb/ubuntu/libgdk-pixbuf2.0-0?distro=trusty	ubuntu	libgdk-pixbuf2.0-0	< 2.30.7-0ubuntu1.1	trusty
Affected	pkg:deb/ubuntu/libgdk-pixbuf2.0-0-udeb?distro=trusty	ubuntu	libgdk-pixbuf2.0-0-udeb	< 2.30.7-0ubuntu1.1	trusty
Affected	pkg:deb/ubuntu/gir1.2-gdkpixbuf-2.0?distro=trusty	ubuntu	gir1.2-gdkpixbuf-2.0	< 2.30.7-0ubuntu1.1	trusty

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date