PT-2013-6305 · Gtk+ Team+3 · Gtk++3
Publicado
2013-12-31
·
Atualizado
2024-06-15
·
CVE-2013-7447
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
GTK+ versions prior to 3.9.8
Description
The issue is related to an integer overflow in the
gdk cairo set source pixbuf function, which can be triggered by a large image file. This leads to a large memory allocation, causing a denial of service (crash). The problem affects various applications that use GTK+, including eom, gnome-photos, eog, gambas3, thunar, and pinpoint.Recommendations
For GTK+ versions prior to 3.9.8, update to version 3.9.8 or later to resolve the issue.
At the moment, there is no information about additional mitigation measures for this specific problem.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Gtk+
Suse
Ubuntu