GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5681-1 advisory.

    It was discovered that gThumb did not properly managed memory under certain circumstances. An attacker     could possibly use this issue to cause gThumb to crash, resulting in a denial of service, or possibly     execute arbitrary code. (CVE-2018-18718)

    It was discovered that gThumb did not properly managed memory when processing certain image files. If a     user were tricked into opening a specially crafted JPEG file, an attacker could possibly use this issue to     cause gThumb to crash, resulting in a denial of service, or possibly execute arbitrary code.
    (CVE-2019-20326)

    It was discovered that gThumb did not properly handled certain malformed image files. If a user were     tricked into opening a specially crafted JPEG file, an attacker could possibly use this issue to cause     gThumb to crash, resulting in a denial of service. (CVE-2020-36427)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5680-1 advisory.

    It was discovered that gThumb did not properly managed memory when processing certain image files. If a     user were tricked into opening a specially crafted JPEG file, an attacker could possibly use this issue to     cause gThumb to crash, resulting in a denial of service, or possibly execute arbitrary code.
    (CVE-2019-20326)

    It was discovered that gThumb did not properly handled certain malformed image files. If a user were     tricked into opening a specially crafted JPEG file, an attacker could possibly use this issue to cause     gThumb to crash, resulting in a denial of service. (CVE-2020-36427)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
195684	RHEL 6 : gthumb (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	medium
183105	Ubuntu 16.04 ESM / 18.04 ESM : gThumb vulnerabilities (USN-5681-1)	Nessus	Ubuntu Local Security Checks	high
166155	Ubuntu 20.04 LTS : gThumb vulnerabilities (USN-5680-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2020-36427

medium

Tenable Plugins

medium

high

high