CVE-2015-7674

Advisory lineage Upstream: 0 Downstream: 11
Modified
Published: 26 Oct 2015, 17:00
Last modified:06 Aug 2024, 07:58

Vulnerability Summary

Overall Risk (default)
medium
27/100
CVSS Score
6.8 MEDIUM
v2.0 (nvd)
EPSS Score
0.98% LOW
1% probability -0.57%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

26 Oct 2015, 17:00
Published
Vulnerability first disclosed
06 Aug 2024, 07:58
Last Modified
Vulnerability information updated

Description

Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow.

CVSS Metrics

  • v2.0•MEDIUM•Score: 6.8AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 0.98%• Percentile: 77%

Techniques & Countermeasures

  • CWE-189•Numeric Errors

    Weaknesses in this category are related to improper calculation or conversion of numbers.

Affected Systems

  • canonical•ubuntu_linux

    12.04 | 14.04 | 15.04

  • gnome•gdk-pixbuf

    ≤ 2.32.0

  • opensuse•opensuse

    13.2

References (12)