PT-2016-7146 · Gnome+3 · Glib+4
Kaslov Dmitri
·
Publicado
2016-08-21
·
Atualizado
2024-06-15
·
CVE-2016-6855
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Eye of GNOME versions 3.16.5 through 3.17.x
Eye of GNOME versions 3.18.x through 3.18.2
Eye of GNOME version 3.19.x
Eye of GNOME versions 3.20.x through 3.20.3
Description
The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds write and crash. This is achieved by passing invalid UTF-8 to GMarkup.
Recommendations
For Eye of GNOME version 3.16.5, update to a version later than 3.16.5 or ensure glib is updated to version 2.44.1 or later.
For Eye of GNOME versions 3.17.x, update to a version later than 3.17.x or ensure glib is updated to version 2.44.1 or later.
For Eye of GNOME versions 3.18.x through 3.18.2, update to version 3.18.3 or later, or ensure glib is updated to version 2.44.1 or later.
For Eye of GNOME version 3.19.x, update to a version later than 3.19.x or ensure glib is updated to version 2.44.1 or later.
For Eye of GNOME versions 3.20.x through 3.20.3, update to version 3.20.4 or later, or ensure glib is updated to version 2.44.1 or later.
Exploit
Correção
DoS
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Eye Of Gnome
Suse
Ubuntu
Glib