Vulnerability Details CVE-2015-7674
Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 75.8%
CVSS Severity
CVSS v2 Score 6.8
References
- http://ftp.gnome.org/pub/gnome/sources/gdk-pixbuf/2.32/gdk-pixbuf-2.32.1.news
- http://lists.opensuse.org/opensuse-updates/2016-03/msg00124.html
- http://lists.opensuse.org/opensuse-updates/2016-06/msg00006.html
- http://www.debian.org/security/2015/dsa-3378
- http://www.openwall.com/lists/oss-security/2015/10/01/4
- http://www.openwall.com/lists/oss-security/2015/10/01/7
- http://www.openwall.com/lists/oss-security/2015/10/02/10
- http://www.openwall.com/lists/oss-security/2015/10/05/7
- http://www.securityfocus.com/bid/76955
- http://www.ubuntu.com/usn/USN-2767-1
- https://git.gnome.org/browse/gdk-pixbuf/commit/?id=e9a5704edaa9aee9498f1fbf6e1b70fcce2e55aa
- https://security.gentoo.org/glsa/201512-05
- http://ftp.gnome.org/pub/gnome/sources/gdk-pixbuf/2.32/gdk-pixbuf-2.32.1.news
- http://lists.opensuse.org/opensuse-updates/2016-03/msg00124.html
- http://lists.opensuse.org/opensuse-updates/2016-06/msg00006.html
- http://www.debian.org/security/2015/dsa-3378
- http://www.openwall.com/lists/oss-security/2015/10/01/4
- http://www.openwall.com/lists/oss-security/2015/10/01/7
- http://www.openwall.com/lists/oss-security/2015/10/02/10
- http://www.openwall.com/lists/oss-security/2015/10/05/7
- http://www.securityfocus.com/bid/76955
- http://www.ubuntu.com/usn/USN-2767-1
- https://git.gnome.org/browse/gdk-pixbuf/commit/?id=e9a5704edaa9aee9498f1fbf6e1b70fcce2e55aa
- https://security.gentoo.org/glsa/201512-05
Products affected by CVE-2015-7674
-
cpe:2.3:a:gnome:gdk-pixbuf:-
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.10
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.11
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.8
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.9
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.8
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.9
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.20.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.20.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.22.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.22.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.24.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.24.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.25.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.25.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.27.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.27.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.27.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.27.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.28.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.28.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.28.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.29.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.29.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.29.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.29.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.8
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.32.0
-
cpe:2.3:o:canonical:ubuntu_linux:12.04
-
cpe:2.3:o:canonical:ubuntu_linux:14.04
-
cpe:2.3:o:canonical:ubuntu_linux:15.04
-
cpe:2.3:o:opensuse:opensuse:13.2