- Vulnerability/
- USN-3912-1
USN-3912-1: GDK-PixBuf vulnerability
First published: Wed Mar 20 2019(Updated: )
It was discovered that the GDK-PixBuf library did not properly handle certain BMP images. If an user or automated system were tricked into opening a specially crafted BMP file, a remote attacker could use this flaw to cause GDK-PixBuf to crash, resulting in a denial of service, or possibly execute arbitrary code.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/libgdk-pixbuf2.0-0 | <2.32.2-1ubuntu1.6 | 2.32.2-1ubuntu1.6 |
| Ubuntu Ubuntu | =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this GDK-PixBuf vulnerability?
The vulnerability ID for this GDK-PixBuf vulnerability is CVE-2017-12447.
What is the severity of USN-3912-1?
The severity of USN-3912-1 is not specified.
How does the GDK-PixBuf vulnerability affect my system?
If an user or automated system opens a specially crafted BMP file, it could cause GDK-PixBuf to crash, resulting in a denial of service or possibly remote code execution.
Which version of libgdk-pixbuf2.0-0 is affected by this vulnerability?
The version of libgdk-pixbuf2.0-0 affected by this vulnerability is up to but not including version 2.32.2-1ubuntu1.6.
How do I fix the GDK-PixBuf vulnerability?
To fix the GDK-PixBuf vulnerability, update the libgdk-pixbuf2.0-0 package to version 2.32.2-1ubuntu1.6 or later.
- agent/severity
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/title
- agent/references
- agent/tags
- agent/description
- agent/event
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/trending
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/16.04