Описание
Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gif_get_lzw function resulting in memory corruption and potential code execution
Ссылки
- Issue TrackingPatchVendor Advisory
- Mailing ListThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Issue TrackingPatchVendor Advisory
- Mailing ListThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.36.8 (включая)
cpe:2.3:a:gnome:gdk-pixbuf:*:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Конфигурация 3
Одно из
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
EPSS
Процентиль: 76%
0.00961
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-190
Связанные уязвимости
CVSS3: 8.8
ubuntu
почти 8 лет назад
Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gif_get_lzw function resulting in memory corruption and potential code execution
CVSS3: 7.3
redhat
около 8 лет назад
Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gif_get_lzw function resulting in memory corruption and potential code execution
CVSS3: 8.8
debian
почти 8 лет назад
Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer ove ...
EPSS
Процентиль: 76%
0.00961
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-190