CVE-2017-12447

Опубликовано: 07 мар. 2019

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack corruption) or possibly have unspecified other impact via a crafted file folder.

Ссылки

https://bugzilla.gnome.org/show_bug.cgi?id=785979
Exploit
Issue Tracking
Vendor Advisory
https://github.com/hackerlib/hackerlib-vul/tree/master/gnome
Exploit
Third Party Advisory
https://usn.ubuntu.com/3912-1/
https://bugzilla.gnome.org/show_bug.cgi?id=785979
Exploit
Issue Tracking
Vendor Advisory
https://github.com/hackerlib/hackerlib-vul/tree/master/gnome
Exploit
Third Party Advisory
https://usn.ubuntu.com/3912-1/

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:gnome:gdk-pixbuf:2.32.2:*:*:*:*:*:*:*

cpe:2.3:a:gnome:nautilus:3.14.3:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:*:*:*:*

EPSS

Процентиль: 54%

0.00314

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2017-12447

CVSS3: 7.8

ubuntu

почти 7 лет назад

CVE-2017-12447

CVSS3: 7.8

redhat

больше 8 лет назад

CVE-2017-12447

CVSS3: 7.8

debian

почти 7 лет назад

GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus ...

GHSA-5737-crgv-prwm

CVSS3: 7.8

github

больше 3 лет назад

EPSS

Процентиль: 54%

0.00314

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119