PT-2021-7559

CVE-2021-46829

·

تاريخ النشر

2021-06-02

·

تاريخ التحديث

2024-06-15

الوصف من

CVSS 3.1
7.8
عالية
المقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions GdkPixbuf versions prior to 2.42.8
Description The issue is related to a heap-based buffer overflow in the composite frame() function of the GdkPixbuf library when handling GIF files. This overflow can be exploited to execute arbitrary code, particularly on 32-bit systems.
Recommendations For versions prior to 2.42.8, update to version 2.42.8 or later to resolve the issue. As a temporary workaround, consider restricting the use of the composite frame() function when handling GIF files until a patch is available.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALSA-2023:2216
ALSA-2023_2216
ALT-PU-2022-1509
DSA-5228-1
ELSA-2023-2216
MGASA-2022-0269
OESA-2022-1873
OESA-2022-1874
OPENSUSE-SU-2022_2995-1
OPENSUSE-SU-2022_2996-1
OPENSUSE-SU-2024:12222-1
RHSA-2023:2216
RHSA-2023_2216
SUSE-SU-2022:2995-1
SUSE-SU-2022_2995-1
SUSE-SU-2022:2996-1
SUSE-SU-2022_2996-1
USN-5554-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾