CVE-2011-2485: Medium severity gnome gdkpixbuf vulnerability
Published Jul 3, 2012
·Updated
The gdkpixbufgifimageload function in gdk-pixbuf/io-gif.c in gdk-pixbuf before 2.23.5 does not properly handle certain return values, which allows remote attackers to cause a denial of service (memory consumption) via a crafted GIF image file.
Affected Software
2 affected components
Gnome GDK-PixBuf<=2.23.3
Gnome GDK-PixBuf=2.22.1
Remediation
Event History
Jul 3, 2012
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2485?
The severity of CVE-2011-2485 is categorized as moderate due to its potential to cause denial of service.
2
How do I fix CVE-2011-2485?
To fix CVE-2011-2485, upgrade gdk-pixbuf to version 2.23.5 or later.
3
What types of attacks are possible with CVE-2011-2485?
CVE-2011-2485 allows remote attackers to execute denial of service attacks through specifically crafted GIF image files.
4
Which versions of gdk-pixbuf are affected by CVE-2011-2485?
Versions of gdk-pixbuf prior to 2.23.5, including 2.22.1, are affected by CVE-2011-2485.
5
Is there any workaround for CVE-2011-2485?
There are no known workarounds for CVE-2011-2485 other than upgrading to the fixed version.