NVD

Id
28168  
Name
CVE-2015-7673  
Description
io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) and possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-10-26  
Modified Date
2016-12-23  
Seq
2015-7673  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
148128 28168 CVE-2015-7673 http://ftp.gnome.org/pub/gnome/sources/gdk-pixbuf/2.32/gdk-pixbuf-2.32.0.news  View
148129 28168 CVE-2015-7673 openSUSE-SU-2016:0897  View
148130 28168 CVE-2015-7673 openSUSE-SU-2016:1467  View
148131 28168 CVE-2015-7673 DSA-3378  View
148132 28168 CVE-2015-7673 [oss-security] 20151001 CVE request: Heap overflow and DoS with a tga file in gdk-pixbuf < 2.32.1  View
148133 28168 CVE-2015-7673 [oss-security] 20151002 Re: CVE request: Heap overflow and DoS with a tga file in gdk-pixbuf < 2.32.1  View
148134 28168 CVE-2015-7673 76953  View
148135 28168 CVE-2015-7673 USN-2767-1  View
148136 28168 CVE-2015-7673 https://git.gnome.org/browse/gdk-pixbuf/commit/?id=19f9685dbff7d1f929c61cf99188df917a18811d  View
148137 28168 CVE-2015-7673 https://git.gnome.org/browse/gdk-pixbuf/commit/?id=6ddca835100107e6b5841ce9d56074f6d98c387e  View
148138 28168 CVE-2015-7673 https://git.gnome.org/browse/gdk-pixbuf/commit/?id=edf6fb8d856574bc3bb3a703037f56533229267c  View
148139 28168 CVE-2015-7673 GLSA-201512-05  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10299 JVNDB-2015-005619 gdk-pixbuf の io-tga.c におけるサービス運用妨害 (DoS) の脆弱性 gdk-pixbuf の io-tga.c は、割り当てに失敗したヒープメモリを使用するため、サービス運用妨害 (ヒープベースのバッファオーバーフローおよびアプリケーションクラッシュ) 状態にされる、および任意のコードを実行される脆弱性が存在します。 CVE-2015-7673 84898 CVE-2015-7673 28168 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005619.html 2015-09-19 2015-10-29 View