CVEvulnerability
CVE-2012-2370
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-08-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-189
Description
Multiple integer overflows in the read_bitmap_file_data function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service (application crash) via a negative (1) height or (2) width in an XBM file, which triggers a heap-based buffer overflow.
Affected configurations
• gnome gdk-pixbuf (<= 2.26.0)
• gnome gdk-pixbuf 2.23.3
• gnome gdk-pixbuf 2.23.4
• gnome gdk-pixbuf 2.23.5
• gnome gdk-pixbuf 2.24.0
• gnome gdk-pixbuf 2.24.1
• gnome gdk-pixbuf 2.25.0
• gnome gdk-pixbuf 2.25.2
Related
Weakness · not in database (1)
References
- http://git.gnome.org/browse/gdk-pixbuf/ git.gnome.org
- http://git.gnome.org/browse/gdk-pixbuf/commit/?id=4f0f465f991cd454d03189497f923eb40c170c22 Exploit, Patch
- http://git.gnome.org/browse/gdk-pixbuf/commit/?id=b1bb3053856aede37d473c92f0e5a10e29f10516 Patch
- http://rhn.redhat.com/errata/RHSA-2013-0135.html rhn.redhat.com
- http://secunia.com/advisories/49125 Vendor Advisory
- http://secunia.com/advisories/49715 Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-201206-20.xml www.gentoo.org
- http://www.openwall.com/lists/oss-security/2012/05/15/8 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/05/15/9 www.openwall.com
- http://www.securityfocus.com/bid/53548 www.securityfocus.com
- https://bugs.launchpad.net/ubuntu/+source/gdk-pixbuf/+bug/681150 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75578 exchange.xforce.ibmcloud.com
- http://git.gnome.org/browse/gdk-pixbuf/ git.gnome.org
- http://git.gnome.org/browse/gdk-pixbuf/commit/?id=4f0f465f991cd454d03189497f923eb40c170c22 Exploit, Patch
- http://git.gnome.org/browse/gdk-pixbuf/commit/?id=b1bb3053856aede37d473c92f0e5a10e29f10516 Patch
- http://rhn.redhat.com/errata/RHSA-2013-0135.html rhn.redhat.com
- http://secunia.com/advisories/49125 Vendor Advisory
- http://secunia.com/advisories/49715 Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-201206-20.xml www.gentoo.org
- http://www.openwall.com/lists/oss-security/2012/05/15/8 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/05/15/9 www.openwall.com
- http://www.securityfocus.com/bid/53548 www.securityfocus.com
- https://bugs.launchpad.net/ubuntu/+source/gdk-pixbuf/+bug/681150 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75578 exchange.xforce.ibmcloud.com