An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-1100-1 | gdk-pixbuf security update |
Debian DSA |
DSA-3978-1 | gdk-pixbuf security update |
EUVD |
EUVD-2017-12003 | An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability. |
Ubuntu USN |
USN-3418-1 | GDK-PixBuf vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Sun, 13 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: talos
Published:
Updated: 2024-09-16T22:30:21.047Z
Reserved: 2016-12-01T00:00:00
Link: CVE-2017-2862
No data.
Status : Deferred
Published: 2017-09-05T18:29:00.507
Modified: 2025-04-20T01:37:25.860
Link: CVE-2017-2862
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
EUVD
Ubuntu USN