CVE-2015-7674: Buffer Overflow
Integer overflow in the pixopsscalenearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7674?
CVE-2015-7674 is rated as a high severity vulnerability due to its potential to cause application crashes and execute arbitrary code.
How do I fix CVE-2015-7674?
To fix CVE-2015-7674, update gdk-pixbuf to version 2.32.1 or later as well as relevant packages on affected systems.
What types of systems are affected by CVE-2015-7674?
CVE-2015-7674 affects systems running versions of Ubuntu Linux 12.04, 14.04, 15.04, GNOME gdk-pixbuf up to 2.32.0, and openSUSE 13.2.
What could be the impact of exploiting CVE-2015-7674?
Exploiting CVE-2015-7674 could lead to application crashes and potentially allow attackers to execute arbitrary code remotely.
Is there any known exploit for CVE-2015-7674?
As of now, specific public exploits for CVE-2015-7674 have not been widely reported, but the vulnerability itself is serious enough to warrant caution.