CVE-2017-12447: Buffer Overflow
GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack corruption) or possibly have unspecified other impact via a crafted file folder.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2017-12447?
CVE-2017-12447 is a vulnerability in GdkPixBuf (aka gdk-pixbuf), allowing attackers to cause a denial of service or possibly have unspecified other impact via a crafted file folder.
What software is affected by CVE-2017-12447?
GdkPixBuf version 2.32.2 and GNOME Nautilus version 3.14.3 on Ubuntu 16.04 are affected.
What is the severity of CVE-2017-12447?
The severity of CVE-2017-12447 is high with a CVSS score of 7.8.
How can I fix CVE-2017-12447?
Update GtkPixBuf to version 2.34.0-1 or higher.
Where can I find more information about CVE-2017-12447?
You can find more information about CVE-2017-12447 at the following references: [https://bugzilla.gnome.org/show_bug.cgi?id=785979](https://bugzilla.gnome.org/show_bug.cgi?id=785979), [https://github.com/hackerlib/hackerlib-vul/tree/master/gnome](https://github.com/hackerlib/hackerlib-vul/tree/master/gnome), [https://usn.ubuntu.com/3912-1/](https://usn.ubuntu.com/3912-1/).