ID CVE-2015-8875
Summary Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_process functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image, which triggers a heap-based buffer overflow.
References
Vulnerable Configurations
  • cpe:2.3:a:gnome:gdk-pixbuf:-:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:-:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.16.2:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.16.2:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.16.3:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.16.3:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.16.4:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.16.4:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.16.5:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.16.5:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.16.6:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.16.6:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.17.0:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.17.0:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.17.1:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.17.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.17.2:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.17.2:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.17.3:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.17.3:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.17.4:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.17.4:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.17.5:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.17.5:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.17.6:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.17.6:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.17.7:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.17.7:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.17.8:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.17.8:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.17.9:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.17.9:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.17.10:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.17.10:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.17.11:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.17.11:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.18.0:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.18.0:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.18.1:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.18.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.18.2:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.18.2:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.18.3:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.18.3:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.18.4:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.18.4:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.18.5:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.18.5:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.18.6:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.18.6:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.18.7:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.18.7:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.18.8:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.18.8:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.18.9:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.18.9:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.19.0:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.19.0:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.19.1:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.19.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.19.2:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.19.2:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.19.3:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.19.3:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.19.4:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.19.4:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.19.5:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.19.5:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.19.6:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.19.6:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.19.7:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.19.7:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.20.0:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.20.0:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.20.1:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.20.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.21.0:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.21.0:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.21.1:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.21.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.21.2:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.21.2:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.21.3:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.21.3:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.21.4:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.21.4:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.21.6:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.21.6:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.21.7:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.21.7:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.22.0:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.22.0:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.22.1:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.22.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.23.0:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.23.0:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.23.1:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.23.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.23.2:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.23.2:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.23.3:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.23.3:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.23.4:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.23.4:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.23.5:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.23.5:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.24.0:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.24.0:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.24.1:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.24.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.25.0:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.25.0:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.25.2:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.25.2:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.26.0:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.26.0:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.26.1:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.26.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.26.2:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.26.2:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.26.3:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.26.3:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.26.4:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.26.4:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.26.5:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.26.5:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.27.0:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.27.0:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.27.1:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.27.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.27.2:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.27.2:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.27.3:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.27.3:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.28.0:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.28.0:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.28.1:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.28.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.28.2:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.28.2:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.29.0:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.29.0:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.29.1:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.29.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.29.2:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.29.2:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.29.3:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.29.3:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.30.0:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.30.0:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.30.1:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.30.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.30.2:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.30.2:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.30.3:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.30.3:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.30.4:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.30.4:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.30.5:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.30.5:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.30.6:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.30.6:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.30.7:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.30.7:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.30.8:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.30.8:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.31.0:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.31.0:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.31.1:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.31.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.31.2:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.31.2:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.31.3:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.31.3:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.31.4:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.31.4:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.31.5:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.31.5:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.31.6:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.31.6:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.31.7:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.31.7:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.32.0:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.32.0:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.32.1:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.32.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.32.2:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.32.2:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.32.3:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.32.3:*:*:*:*:*:*:*
  • cpe:2.3:a:gnome:gdk-pixbuf:2.33:*:*:*:*:*:*:*
    cpe:2.3:a:gnome:gdk-pixbuf:2.33:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
CVSS
Base: 6.8 (as of 05-10-2016 - 01:59)
Impact:
Exploitability:
CWE CWE-189
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:P
refmap via4
confirm https://git.gnome.org/browse/gdk-pixbuf/commit/?id=dbfe8f70471864818bf458a39c8a99640895bd22
debian DSA-3589
mlist
  • [oss-security] 20160512 Possible CVE request: gdk-pixbuf: Additional fixes to protect against overlows in pixops_* functions (similar to CVE-2015-7674)
  • [oss-security] 20160516 Re: CVE Request: gdk-pixbuf: Additional fixes to protect against overlows in pixops_* functions (similar to CVE-2015-7674)
  • [oss-security] 20160517 Re: CVE Request: gdk-pixbuf: Additional fixes to protect against overlows in pixops_* functions (similar to CVE-2015-7674)
ubuntu USN-3085-1
Last major update 05-10-2016 - 01:59
Published 01-06-2016 - 22:59
Last modified 05-10-2016 - 01:59
Back to Top