REDHAT-BUG-1252290
First published: Tue Aug 11 2015(Updated: )
Security researcher Gustavo Grieco reported a heap overflow in gdk-pixbuf affecting Linux systems using Gnome. This issue is triggered by the scaling of a malformed bitmap format image and results in a potentially exploitable crash. This issue only affects Linux systems running Gnome. Windows and OS X operating systems are unaffected. External Reference: <a href="https://www.mozilla.org/security/announce/2015/mfsa2015-88.html">https://www.mozilla.org/security/announce/2015/mfsa2015-88.html</a> Acknowledgements: Red Hat would like to thank the Mozilla project for reporting this issue. Upstream acknowledges Gustavo Grieco as the original reporter.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| gdk-pixbuf |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.mozilla.org/security/announce/2015/mfsa2015-88.html
- https://rhn.redhat.com/errata/RHSA-2015-1586.html
- https://bugzilla.gnome.org/show_bug.cgi?id=752297
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1253206
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1242449
- https://git.gnome.org/browse/gdk-pixbuf/commit/?id=ffec86e
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1252290
- https://bodhi.fedoraproject.org/updates/FEDORA-2015-13925
- https://bodhi.fedoraproject.org/updates/FEDORA-2015-13926
- https://rhn.redhat.com/errata/RHSA-2015-1682.html
- https://rhn.redhat.com/errata/RHSA-2015-1694.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1252290
Frequently Asked Questions
What is the severity of REDHAT-BUG-1252290?
The severity of REDHAT-BUG-1252290 is considered high due to the potential for heap overflow and exploitation.
How do I fix REDHAT-BUG-1252290?
To fix REDHAT-BUG-1252290, you should update the gdk-pixbuf library to the latest version as provided by your Linux distribution.
Who is affected by REDHAT-BUG-1252290?
REDHAT-BUG-1252290 affects Linux systems that are running the Gnome desktop environment utilizing gdk-pixbuf.
What causes the issue in REDHAT-BUG-1252290?
The issue in REDHAT-BUG-1252290 is caused by a heap overflow triggered by the scaling of a malformed bitmap format image.
Can REDHAT-BUG-1252290 lead to system crashes?
Yes, REDHAT-BUG-1252290 can lead to potentially exploitable crashes due to the heap overflow vulnerability.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2015-4491
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/gnome
- canonical/gdk-pixbuf