OSVDB ID: 9999

Title: GdkPixbuf ICO Image Decoding Remote Overflow

Info

Disclosure

Sep 16, 2004

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

A remote overflow exists in GdkPixbuf. GdkPixbuf fails to properly validate input in the ICO image decoding functionality resulting in a integer overflow. With a specially crafted request, an attacker can cause a DoS on the affected application resulting in a loss of availability.

Classification

Location: Remote/Network Access Required
Attack Type: Denial of Service, Input Manipulation
Impact: Loss of Availability
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue. Apply the appropriate operating system vendor upgrade, as it has been reported to fix this vulnerability.

Products

GNOME Project

GdkPixbuf

0.x

GTK+ Team

GTK+

2.x

References

Credit

  • Chris Evans - chrisBrand New Doo Dooscary.beasts.org -


Direct URL: http://osvdb.org/36218