CVE-2017-1000422

Description

Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gif_get_lzw function resulting in memory corruption and potential code execution

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.961

Associated Vulnerability

VulnerabilityOS Platform
GDK Pixbuf library (USN-3418-1) libgdk-pixbuf2.0-0_2.30.7-0ubuntu1.8_i386.debLinux
GDK Pixbuf library (USN-3418-1) libgdk-pixbuf2.0-0_2.30.7-0ubuntu1.8_amd64.debLinux
GDK Pixbuf library (USN-3418-1) libgdk-pixbuf2.0-0_2.32.2-1ubuntu1.5_amd64.debLinux
GDK Pixbuf library (USN-3418-1) libgdk-pixbuf2.0-0_2.32.2-1ubuntu1.5_i386.debLinux
GDK Pixbuf library (USN-3532-1) libgdk-pixbuf2.0-0_2.30.7-0ubuntu1.8_i386.debLinux
GDK Pixbuf library (USN-3532-1) libgdk-pixbuf2.0-0_2.30.7-0ubuntu1.8_amd64.debLinux
GDK Pixbuf library (USN-3532-1) libgdk-pixbuf2.0-0_2.32.2-1ubuntu1.4_i386.debLinux
GDK Pixbuf library (USN-3532-1) libgdk-pixbuf2.0-0_2.32.2-1ubuntu1.4_amd64.debLinux
GDK Pixbuf library (USN-3532-1) libgdk-pixbuf2.0-0_2.36.11-1ubuntu0.1_i386.debLinux
GDK Pixbuf library (USN-3532-1) libgdk-pixbuf2.0-0_2.36.11-1ubuntu0.1_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234