CVE-2015-7674
Fixed in a distro release EPSS 6%
Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow.
Products: canonical ubuntu_linux, gnome gdk-pixbuf, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | gdk-pixbuf | 2.32.1-1 |
| Debian 12 | gtk+2.0 | 2.21.5-1 |
| Debian 13 | gdk-pixbuf | 2.32.1-1 |
| Debian 13 | gtk+2.0 | 2.21.5-1 |
| Debian 14 | gdk-pixbuf | 2.32.1-1 |
| Debian 14 | gtk+2.0 | 2.21.5-1 |
| Debian 6.0 | gtk+2.0 | 2.20.1-2+deb6u2 |
| Debian 7 | gdk-pixbuf | 2.26.1-1+deb7u4 |
| Debian 7 | gdk-pixbuf | 2.26.1-1+deb7u2 |
| Debian 8 | gdk-pixbuf | 2.31.1-2+deb8u3 |
| SUSE Linux Enterprise Desktop 11 SP3 | gtk2 | 2.18.9-0.35.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | gtk2 | 2.18.9-0.35.1 |
| SUSE Linux Enterprise Desktop 12 | gdk-pixbuf | 2.30.6-7.2 |
| SUSE Linux Enterprise Desktop 12 SP1 | gdk-pixbuf | 2.30.6-7.2 |
| SUSE Linux Enterprise Server 11 SP3 | gtk2 | 2.18.9-0.35.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | gtk2 | 2.18.9-0.35.1 |
| SUSE Linux Enterprise Server 11 SP4 | gtk2 | 2.18.9-0.35.1 |
| SUSE Linux Enterprise Server 12 | gdk-pixbuf | 2.30.6-7.2 |
| SUSE Linux Enterprise Server 12 SP1 | gdk-pixbuf | 2.30.6-7.2 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | gtk2 | 2.18.9-0.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | gtk2 | 2.18.9-0.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | gdk-pixbuf | 2.30.6-7.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | gdk-pixbuf | 2.30.6-7.2 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | gtk2 | 2.18.9-0.35.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | gtk2 | 2.18.9-0.35.1 |
| SUSE Linux Enterprise Software Development Kit 12 | gdk-pixbuf | 2.30.6-7.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | gdk-pixbuf | 2.30.6-7.2 |
| Ubuntu 14.04 LTS | gdk-pixbuf | 2.30.7-0ubuntu1.2 |
| openSUSE Tumbleweed | gdk-pixbuf | 2.36.0-1.1 |