PT-2015-2878 · Mozilla+1 · Firefox+1

Gustavo Grieco

·

Publicado

2015-12-15

·

Atualizado

2024-06-15

·

CVE-2015-7217

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 43.0
Description The issue is related to the gdk-pixbuf configuration in Mozilla Firefox, which incorrectly enables the TGA decoder on Linux GNOME platforms. This allows remote attackers to cause a denial of service via a crafted Truevision TGA image, resulting in a heap-based buffer overflow. The vulnerability can be exploited by a remote attacker using a specially formed Truevision TGA image, leading to a denial of service.
Recommendations For versions prior to 43.0, update to version 43.0 or later to resolve the issue. As a temporary workaround, consider disabling the TGA decoder until a patch is available. Restrict access to crafted Truevision TGA images to minimize the risk of exploitation.

Exploit

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-12244
CVE-2015-7217
MGASA-2016-0124
OPENSUSE-SU-2024:10071-1
USN-2833-1

Produtos afetados

Firefox
Ubuntu