CVE-2015-4491

Published: Aug 16, 2015Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via crafted bitmap dimensions that are mishandled during scaling.

Affected (10)

Products: Gnome: Gdk Pixbuf · Oracle: Solaris · Canonical: Ubuntu Linux · +2 more

Show all products

Gnome: Gdk Pixbuf · Oracle: Solaris · Canonical: Ubuntu Linux · Fedoraproject: Fedora · Opensuse: Opensuse

1 product

1 product

1 product

1 product

1 product

Configuration A

1 vulnerable · 7 platform

Vulnerable Software	Affected Versions
Gnome Gdk Pixbuf	Up to 2.31.4

Running on/with	Platform Versions
Google Chrome	All versions
Linux Linux Kernel	All versions
Mozilla Firefox	Up to 39.0.3
Mozilla Firefox	Version 38.0.1
Mozilla Firefox	Version 38.0.5
Mozilla Firefox	Version 38.0
Mozilla Firefox	Version 38.1.0

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Solaris	Version 10
Oracle Solaris	Version 11.3

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.04
Fedoraproject Fedora	Version 21
Fedoraproject Fedora	Version 22
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2

Related CWEs

CWE-189

References (64)

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165701.html

Source: security@mozilla.org

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165703.html

Source: security@mozilla.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165730.html

Source: security@mozilla.org

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165732.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html

Source: security@mozilla.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html

Source: security@mozilla.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html

Source: security@mozilla.org

http://lists.opensuse.org/opensuse-updates/2015-09/msg00002.html

Source: security@mozilla.org

http://rhn.redhat.com/errata/RHSA-2015-1586.html

Source: security@mozilla.org

http://rhn.redhat.com/errata/RHSA-2015-1682.html

Source: security@mozilla.org

http://rhn.redhat.com/errata/RHSA-2015-1694.html

Source: security@mozilla.org

http://www.debian.org/security/2015/dsa-3337

Source: security@mozilla.org

http://www.mozilla.org/security/announce/2015/mfsa2015-88.html

Source: security@mozilla.org

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Source: security@mozilla.org

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

Source: security@mozilla.org

Third Party Advisory

http://www.securitytracker.com/id/1033247

Source: security@mozilla.org

http://www.securitytracker.com/id/1033372

Source: security@mozilla.org

http://www.ubuntu.com/usn/USN-2702-1

Source: security@mozilla.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2702-2

Source: security@mozilla.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2702-3

Source: security@mozilla.org

http://www.ubuntu.com/usn/USN-2712-1

Source: security@mozilla.org

http://www.ubuntu.com/usn/USN-2722-1

Source: security@mozilla.org

https://bugzilla.gnome.org/show_bug.cgi?id=752297

Source: security@mozilla.org

Issue Tracking

https://bugzilla.mozilla.org/show_bug.cgi?id=1184009

Source: security@mozilla.org

Issue Tracking

https://bugzilla.redhat.com/show_bug.cgi?id=1252290

Source: security@mozilla.org

Issue Tracking

https://git.gnome.org/browse/gdk-pixbuf/commit/?id=ffec86ed5010c5a2be14f47b33bcf4ed3169a199

Source: security@mozilla.org

https://security.gentoo.org/glsa/201512-05

Source: security@mozilla.org

https://security.gentoo.org/glsa/201605-06

Source: security@mozilla.org

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165701.html