USN-5681-1
Dashboard / Vulnerabilities / USN-5681-1
USN-5681-1
Summary: gThumb vulnerabilities
Details: It was discovered that gThumb did not properly managed memory under certain circumstances. An attacker could possibly use this issue to cause gThumb to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2018-18718) It was discovered that gThumb did not properly managed memory when processing certain image files. If a user were tricked into opening a specially crafted JPEG file, an attacker could possibly use this issue to cause gThumb to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2019-20326) It was discovered that gThumb did not properly handled certain malformed image files. If a user were tricked into opening a specially crafted JPEG file, an attacker could possibly use this issue to cause gThumb to crash, resulting in a denial of service. (CVE-2020-36427)
References: https://ubuntu.com/security/notices/USN-5681-1, https://ubuntu.com/security/CVE-2018-18718, https://ubuntu.com/security/CVE-2019-20326, https://ubuntu.com/security/CVE-2020-36427
Affected packages
Package
Name: gthumb
Purl: pkg:deb/ubuntu/gthumb?arch=source&distro=esm-apps%2Fxenial
Affected ranges
Type: ECOSYSTEM
Events:
