Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:11784
HistoryJan 15, 2019 - 9:07 a.m.

Denial Of Service (DoS)

2019-01-1509:07:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16

EPSS

0.013

Percentile

85.8%

gdk-pixbuf2 is vulnerable to denial of service (DoS) attacks. The vulnerability exists as an Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via crafted bitmap dimensions that are mishandled during scaling.

References