A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file.

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5681-1 advisory.

    It was discovered that gThumb did not properly managed memory under certain circumstances. An attacker     could possibly use this issue to cause gThumb to crash, resulting in a denial of service, or possibly     execute arbitrary code. (CVE-2018-18718)

    It was discovered that gThumb did not properly managed memory when processing certain image files. If a     user were tricked into opening a specially crafted JPEG file, an attacker could possibly use this issue to     cause gThumb to crash, resulting in a denial of service, or possibly execute arbitrary code.
    (CVE-2019-20326)

    It was discovered that gThumb did not properly handled certain malformed image files. If a user were     tricked into opening a specially crafted JPEG file, an attacker could possibly use this issue to cause     gThumb to crash, resulting in a denial of service. (CVE-2020-36427)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5680-1 advisory.

    It was discovered that gThumb did not properly managed memory when processing certain image files. If a     user were tricked into opening a specially crafted JPEG file, an attacker could possibly use this issue to     cause gThumb to crash, resulting in a denial of service, or possibly execute arbitrary code.
    (CVE-2019-20326)

    It was discovered that gThumb did not properly handled certain malformed image files. If a user were     tricked into opening a specially crafted JPEG file, an attacker could possibly use this issue to cause     gThumb to crash, resulting in a denial of service. (CVE-2020-36427)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2749 advisory.

  - A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-     image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers to     cause a crash and potentially execute arbitrary code via a crafted JPEG file. (CVE-2019-20326)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202008-05 (gThumb: Arbitrary code execution)

    A heap-based buffer overflow in gThumb&rsquo;s
      _cairo_image_surface_create_from_jpeg() function, located in       extensions/cairo_io/cairo-image-surface-jpeg.c was discovered.
  Impact :

    A remote attacker could entice a user to open a specially crafted image       file using gThumb, possibly resulting in execution of arbitrary code with       the privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
183105	Ubuntu 16.04 ESM / 18.04 ESM : gThumb vulnerabilities (USN-5681-1)	Nessus	Ubuntu Local Security Checks	high
166155	Ubuntu 20.04 LTS : gThumb vulnerabilities (USN-5680-1)	Nessus	Ubuntu Local Security Checks	high
152898	Debian DLA-2749-1 : gthumb - LTS security update	Nessus	Debian Local Security Checks	high
139440	GLSA-202008-05 : gThumb: Arbitrary code execution	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2019-20326

high

Tenable Plugins

high

high

high

high