[Forgot Password]
Login  Register Subscribe

23631

 
 

119105

 
 

98250

 
 

909

 
 

79281

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2012-2370

Date: (C)2012-08-13   (M)2017-08-29 


Multiple integer overflows in the read_bitmap_file_data function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service (application crash) via a negative (1) height or (2) width in an XBM file, which triggers a heap-based buffer overflow.

CVSS Score: 5.0Access Vector: NETWORK
Exploit Score: 10.0Access Complexity: LOW
Impact Score: 2.9Authentication: NONE
 Confidentiality: NONE
 Integrity: NONE
 Availability: PARTIAL





Reference:
SECUNIA-49125
SECUNIA-49715
BID-53548
GLSA-201206-20
RHSA-2013:0135
http://www.openwall.com/lists/oss-security/2012/05/15/8
http://www.openwall.com/lists/oss-security/2012/05/15/9
gdkpixbuf-readbitmapfiledata-bo(75578)
http://git.gnome.org/browse/gdk-pixbuf/
http://git.gnome.org/browse/gdk-pixbuf/commit/?id=4f0f465f991cd454d03189497f923eb40c170c22
http://git.gnome.org/browse/gdk-pixbuf/commit/?id=b1bb3053856aede37d473c92f0e5a10e29f10516
https://bugs.launchpad.net/ubuntu/+source/gdk-pixbuf/+bug/681150

CPE    3
cpe:/a:gnome:gdk-pixbuf:2.23.3
cpe:/a:gnome:gdk-pixbuf:2.23.5
cpe:/a:gnome:gdk-pixbuf:2.24.0
CWE    1
CWE-189
OVAL    4
oval:org.secpod.oval:def:104081
oval:org.secpod.oval:def:500941
oval:org.secpod.oval:def:202513
oval:org.secpod.oval:def:1500023
...

© 2013 SecPod Technologies