CVE-2015-8875: Buffer Overflow
Multiple integer overflows in the (1) pixopscompositenearest, (2) pixopscompositecolornearest, and (3) pixopsprocess functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image, which triggers a heap-based buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8875?
CVE-2015-8875 has a medium severity rating due to its potential for causing application crashes and executing arbitrary code.
How do I fix CVE-2015-8875?
To fix CVE-2015-8875, update gdk-pixbuf to version 2.33.1 or later.
What systems are affected by CVE-2015-8875?
CVE-2015-8875 affects gdk-pixbuf versions prior to 2.33.1 and Debian Linux 8.0.
What are the potential impacts of CVE-2015-8875?
The potential impacts of CVE-2015-8875 include denial of service through application crashes and the possibility of remote code execution.
Is there a workaround for CVE-2015-8875?
Currently, there are no known workarounds for CVE-2015-8875 other than upgrading the affected software.