CVEvulnerability

CVE-2015-4491

6.8 MEDIUM Published 2015-08-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-08-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-189

Description

Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via crafted bitmap dimensions that are mishandled during scaling.

Affected configurations

• gnome gdk-pixbuf (<= 2.31.4) • oracle solaris 10 • oracle solaris 11.3 • canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • canonical ubuntu linux 15.04 • fedoraproject fedora 21 • fedoraproject fedora 22 • opensuse opensuse 13.1 • opensuse opensuse 13.2

Related

Weakness · not in database (1)

References