Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-2370

Опубликовано: 13 авг. 2012
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

Multiple integer overflows in the read_bitmap_file_data function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service (application crash) via a negative (1) height or (2) width in an XBM file, which triggers a heap-based buffer overflow.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnome:gdk-pixbuf:*:*:*:*:*:*:*:*
Версия до 2.26.0 (включая)
cpe:2.3:a:gnome:gdk-pixbuf:2.23.3:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdk-pixbuf:2.23.4:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdk-pixbuf:2.23.5:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdk-pixbuf:2.24.0:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdk-pixbuf:2.24.1:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdk-pixbuf:2.25.0:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdk-pixbuf:2.25.2:*:*:*:*:*:*:*

EPSS

Процентиль: 86%
0.02896
Низкий

5 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

ubuntu
около 13 лет назад

Multiple integer overflows in the read_bitmap_file_data function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service (application crash) via a negative (1) height or (2) width in an XBM file, which triggers a heap-based buffer overflow.

redhat
больше 13 лет назад

Multiple integer overflows in the read_bitmap_file_data function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service (application crash) via a negative (1) height or (2) width in an XBM file, which triggers a heap-based buffer overflow.

debian
около 13 лет назад

Multiple integer overflows in the read_bitmap_file_data function in io ...

github
больше 3 лет назад

Multiple integer overflows in the read_bitmap_file_data function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service (application crash) via a negative (1) height or (2) width in an XBM file, which triggers a heap-based buffer overflow.

oracle-oval
больше 12 лет назад

ELSA-2013-0135: gtk2 security and bug fix update (LOW)

EPSS

Процентиль: 86%
0.02896
Низкий

5 Medium

CVSS2

Дефекты

CWE-189