Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-12447

Опубликовано: 08 авг. 2017
Источник: redhat
CVSS3: 7.8
EPSS Низкий

Описание

GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack corruption) or possibly have unspecified other impact via a crafted file folder.

Отчет

This issue did not affect the versions of gdk-pixbuf2 as shipped with Red Hat Enterprise Linux 6 and 7. This issue affects the versions of gdk-pixbuf as shipped with Red Hat Enterprise Linux 5. Red Hat Enterprise Linux 5 is now in Extended Life Phase of the support and maintenance life cycle. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5gdk-pixbufWill not fix
Red Hat Enterprise Linux 6gdk-pixbuf2Not affected
Red Hat Enterprise Linux 7gdk-pixbuf2Not affected
Red Hat Enterprise Linux 8gdk-pixbuf2Not affected
Red Hat Enterprise Linux 8mingw-gdk-pixbufNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-400
https://bugzilla.redhat.com/show_bug.cgi?id=1686828gdk-pixbuf: heap-based overflow caused by invalid palette size

EPSS

Процентиль: 54%
0.00314
Низкий

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 7 лет назад

GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack corruption) or possibly have unspecified other impact via a crafted file folder.

CVSS3: 7.8
nvd
почти 7 лет назад

GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack corruption) or possibly have unspecified other impact via a crafted file folder.

CVSS3: 7.8
debian
почти 7 лет назад

GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus ...

CVSS3: 7.8
github
больше 3 лет назад

GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack corruption) or possibly have unspecified other impact via a crafted file folder.

EPSS

Процентиль: 54%
0.00314
Низкий

7.8 High

CVSS3

Уязвимость CVE-2017-12447