CVE-2013-7447

Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar…

published February 17, 2016

CVSS
—
EPSS
5%
Percentile
91.6
In the wild
Unconfirmed
What it is

Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, allows remote attackers to cause a denial of service (crash) via a large image file, which triggers a large memory allocation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04633 · 91.6th percentile
Published
2016-02-17T15:00Z
EPSS history
Timeline
  • 17 FEB 15:00Z
    Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar…
    cvelistv5