CVE-2017-6311

概要

参考情報

• mov.sx/2017/02/21/bug-hunting-gdk-pixbuf.html · Third Party Advisory
• openwall.com/lists/oss-security/2017/02/21/4 · Exploit
• openwall.com/lists/oss-security/2017/02/26/1 · Mailing List
• securityfocus.com/bid/96779 · Third Party Advisory
• bugzilla.gnome.org/show_bug.cgi · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJF5ARFOX4BFUK6YCBKGAKBQYECO3AI2
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSAZ6UCKKXC5VOWXGWQHOX2ZBLLATIOT
• security.gentoo.org/glsa/201709-08 · Third Party Advisory

gdk-pixbuf のその他の脆弱性

• CVE-2026-5201高 7.5A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper va…
• CVE-2021-46829高 7.8GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demo…
• CVE-2021-20240高 8.8A flaw was found in gdk-pixbuf in versions before 2.42.0. An integer wraparound leading to an out of bounds write can occur when a crafted G…
• CVE-2020-29385中 5.5GNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw.c in the function write_indexes. if c->self…
• CVE-2011-2897緊急 9.8gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw