USN-3418-1

Dashboard / Vulnerabilities / USN-3418-1

USN-3418-1

Summary: gdk-pixbuf vulnerabilities

Details: It was discovered that the GDK-PixBuf library did not properly handle certain jpeg images. If an user or automated system were tricked into opening a specially crafted jpeg file, a remote attacker could use this flaw to cause GDK-PixBuf to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-2862) It was discovered that the GDK-PixBuf library did not properly handle certain tiff images. If an user or automated system were tricked into opening a specially crafted tiff file, a remote attacker could use this flaw to cause GDK-PixBuf to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-2870) Ariel Zelivansky discovered that the GDK-PixBuf library did not properly handle printing certain error messages. If an user or automated system were tricked into opening a specially crafted image file, a remote attacker could use this flaw to cause GDK-PixBuf to crash, resulting in a denial of service. (CVE-2017-6311)

References: https://ubuntu.com/security/notices/USN-3418-1, https://ubuntu.com/security/CVE-2017-2862, https://ubuntu.com/security/CVE-2017-2870, https://ubuntu.com/security/CVE-2017-6311