PT-2012-1128 · Gnome+1 · Gdk-Pixbuf+1

Published 2012-06-23 · Updated 2024-06-15 · CVE-2011-2485

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions gdk-pixbuf versions prior to 2.23.5 gdk-pixbuf versions prior to 2.24.1-r1

Description The issue is related to the gdk pixbuf gif image load function in gdk-pixbuf/io-gif.c, which does not properly handle certain return values. This allows remote attackers to cause a denial of service, specifically memory consumption, via a crafted GIF image file. Multiple vulnerabilities in the gdk-pixbuf package can lead to disruption of protected information availability, and exploitation can be done remotely.

Recommendations For versions prior to 2.23.5, update to version 2.23.5 or later. For versions prior to 2.24.1-r1, update to version 2.24.1-r1 or later. As a temporary workaround, consider restricting the use of the gdk pixbuf gif image load function until a patch is available.

Exploit

Fix

Related Identifiers

BDU:2015-09656

CVE-2011-2485

OPENSUSE-SU-2024:10453-1

SUSE-SU-2012_0841-1

SUSE-SU-2012_0844-1

Affected Products

Suse

Gdk-Pixbuf

References · 38

• 🔥 http://git.gnome.org/browse/gdk-pixbuf/commit/?id=f8569bb13e2aa1584dde61ca545144750f7a7c98 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-2485 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-2485 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201206-20.xml · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2485 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2897 · Security Note
• https://bdu.fstec.ru/vul/2015-09656 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-2485 · Security Note
• http://secunia.com/advisories/49715 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-2485 · Vendor Advisory
• http://secunia.com/advisories/45656 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10453-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2370 · Security Note
• http://download.novell.com/patch/finder/?keywords=20aead63ed168564e4a716a942666e5e · Note
• http://ftp.gnome.org/pub/GNOME/sources/gdk-pixbuf/2.23/gdk-pixbuf-2.23.5.news · Note