CVE-2012-2370
Fixed in a distro release EPSS 4%
Multiple integer overflows in the read_bitmap_file_data function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service (application crash) via a negative (1) height or (2) width in an XBM file, which triggers a heap-based buffer overflow.
Products: gnome gdk-pixbuf
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | gdk-pixbuf | 2.26.1-1 |
| Debian 13 | gdk-pixbuf | 2.26.1-1 |
| Debian 14 | gdk-pixbuf | 2.26.1-1 |
| Red Hat Enterprise Linux 5 | gtk2 | 0:2.10.4-29.el5 |
| Red Hat Enterprise Linux 5 | gtk2-debuginfo | 0:2.10.4-29.el5 |
| Red Hat Enterprise Linux 5 | gtk2-devel | 0:2.10.4-29.el5 |