gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - gdk-pixbuf: GIF loader buffer overflow when initializing decompression tables (CVE-2011-2897)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gdk-pixbuf: GIF loader buffer overflow when initializing decompression tables (CVE-2011-2897)

  - io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote     attackers to cause a denial of service (heap-based buffer overflow and application crash) and possibly     execute arbitrary code via a crafted Truevision TGA (TARGA) file. (CVE-2015-7673)

  - Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1     allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary     code via a crafted GIF image file, which triggers a heap-based buffer overflow. (CVE-2015-7674)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This update of gdk-pixbuf fixes multiple buffer overflows that could have caused a crash or potentially have allowed heap corruptions.
(CVE-2011-2485 / CVE-2012-2370 / CVE-2011-2897)

ID	Name	Product	Family	Severity
199945	RHEL 4 : gdk-pixbuf (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199938	RHEL 5 : gdk-pixbuf (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
64145	SuSE 11.1 Security Update : gdk-pixbuf (SAT Patch Number 6367)	Nessus	SuSE Local Security Checks	medium
59854	SuSE 10 Security Update : gdk-pixbuf (ZYPP Patch Number 8158)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2011-2897

critical

Tenable Plugins

critical

critical

medium

medium