PT-2012-1128 · Gnome+1 · Gdk-Pixbuf+1

Publicado 2012-06-23 · Atualizado 2024-06-15 · CVE-2011-2485

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions gdk-pixbuf versions prior to 2.23.5 gdk-pixbuf versions prior to 2.24.1-r1

Description The issue is related to the gdk pixbuf gif image load function in gdk-pixbuf/io-gif.c, which does not properly handle certain return values. This allows remote attackers to cause a denial of service, specifically memory consumption, via a crafted GIF image file. Multiple vulnerabilities in the gdk-pixbuf package can lead to disruption of protected information availability, and exploitation can be done remotely.

Recommendations For versions prior to 2.23.5, update to version 2.23.5 or later. For versions prior to 2.24.1-r1, update to version 2.24.1-r1 or later. As a temporary workaround, consider restricting the use of the gdk pixbuf gif image load function until a patch is available.

Exploit

Correção

Identificadores relacionados

BDU:2015-09656

CVE-2011-2485

OPENSUSE-SU-2024:10453-1

SUSE-SU-2012_0841-1

SUSE-SU-2012_0844-1

Produtos afetados

Suse

Gdk-Pixbuf

Referências · 38

• 🔥 http://git.gnome.org/browse/gdk-pixbuf/commit/?id=f8569bb13e2aa1584dde61ca545144750f7a7c98 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-2485 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2011-2485 · Aviso do Fabricante
• http://download.novell.com/patch/finder/?keywords=20aead63ed168564e4a716a942666e5e · Nota
• http://ftp.gnome.org/pub/GNOME/sources/gdk-pixbuf/2.23/gdk-pixbuf-2.23.5.news · Nota
• http://download.novell.com/patch/finder/?keywords=1e4fac303fda249f28a90f89a7455837 · Nota
• https://lists.suse.com/pipermail/sle-security-updates/2012-July/000172.html · Nota
• http://security.gentoo.org/glsa/glsa-201206-20.xml · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2011-2485 · Nota
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• http://pidgin.im/news/security/?id=52 · Nota
• http://download.novell.com/patch/finder/?keywords=d761cd6e1a31389dc3a2d6c8c56cdbd3 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2485 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2897 · Nota de Segurança
• https://lists.suse.com/pipermail/sle-security-updates/2012-July/000174.html · Nota