SUSE-SU-2015:1787-1: gtk2&distro=SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2015:1787-1 is a vulnerability in gtk2&distro=SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise with no CVSS score yet.
No CVSS vector published; no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 07-10-2015PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for gtk2 gtk2 was updated to fix two security issues. These security issues were fixed: - CVE-2015-4491: Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, allowed remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via crafted bitmap dimensions that were mishandled during scaling (bsc#942801). - CVE-2015-7674: Fix overflow when scaling GIF files (bsc#948791). This non-security issue was fixed: - Add the script which generates gdk-pixbuf64.loaders to the spec file (bsc#922741).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: not stated in public data.
Suse9 products
- gtk2&distro=SUSE Linux Enterprise Desktop 11 SP3< 2.18.9-0.35.1
- gtk2&distro=SUSE Linux Enterprise Desktop 11 SP4< 2.18.9-0.35.1
- gtk2&distro=SUSE Linux Enterprise Server 11 SP3< 2.18.9-0.35.1
- gtk2&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA< 2.18.9-0.35.1
- gtk2&distro=SUSE Linux Enterprise Server 11 SP4< 2.18.9-0.35.1
1 vendor · 9 products
References
6 links- bugzilla.suse.com/922741REPORT
- bugzilla.suse.com/942801REPORT
- bugzilla.suse.com/948791REPORT