CVE-2012-2370: Buffer Overflow
Published Aug 13, 2012
·Updated
Multiple integer overflows in the readbitmapfiledata function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service (application crash) via a negative (1) height or (2) width in an XBM file, which triggers a heap-based buffer overflow.
Affected Software
8 affected components
Gnome GDK-PixBuf<=2.26.0
Gnome GDK-PixBuf=2.23.3
Gnome GDK-PixBuf=2.23.4
Gnome GDK-PixBuf=2.23.5
Gnome GDK-PixBuf=2.24.0
Gnome GDK-PixBuf=2.24.1
Gnome GDK-PixBuf=2.25.0
Gnome GDK-PixBuf=2.25.2
Remediation
Event History
Aug 13, 2012
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2370?
CVE-2012-2370 is classified as a denial of service vulnerability that can lead to application crashes.
2
How do I fix CVE-2012-2370?
To fix CVE-2012-2370, update gdk-pixbuf to version 2.26.1 or later.
3
What systems are affected by CVE-2012-2370?
CVE-2012-2370 affects gdk-pixbuf versions prior to 2.26.1, including 2.23.x and 2.24.x versions.
4
What types of attacks can exploit CVE-2012-2370?
CVE-2012-2370 can be exploited by remote attackers using crafted XBM files with negative dimensions.
5
Is CVE-2012-2370 a buffer overflow vulnerability?
Yes, CVE-2012-2370 involves a heap-based buffer overflow caused by integer overflows.