CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
83.4%
The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows
remote attackers to cause a denial of service (out-of-bounds write and
crash) via crafted dimensions in an ICO file.
Author | Note |
---|---|
sbeattie | gdk-pixbuf report notes that this may not be necessary for precise, as the reproducer doesn’t crash with 2.26. Also, patch does not apply cleanly to precise’s 2.26.1 version. |
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 14.04 | noarch | gdk-pixbuf | <Â 2.30.7-0ubuntu1.6 | UNKNOWN |
ubuntu | 16.04 | noarch | gdk-pixbuf | <Â 2.32.2-1ubuntu1.2 | UNKNOWN |
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
83.4%