A remote overflow exists in GdkPixbuf. The pixbuf_create_from_xpm (in io-xpm.c) fails to sanitise input from the .xpm resulting in a heap overflow. With a specially crafted request, an attacker can cause execution of arbitrary code resulting in a loss of integrity.
Classification
Location:
Local Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
Solution
Upgrade to the packages not affected for your operating system or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
scary.beasts.org -