Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian 8: DLA-2066-1 Moderate: gthumb Buffer Overflow Threat

debian lts
Calendar Grey January 14, 2020
Dist Debian Esm H88
The Debian LTS team has released an alert concerning gthumb, highlighting a severe buffer overflow vulnerability that can be exploited via a malicious JPEG image.

A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c in gThumb and Pix

Topics%20covered

Topics Covered

security advisory buffer overflow Debian gthumb JPEG exploit

Summary

A heap-based buffer overflow in
_cairo_image_surface_create_from_jpeg() in
extensions/cairo_io/cairo-image-surface-jpeg.c in gThumb and Pix
allows attackers to cause a crash and potentially execute arbitrary
code via a crafted JPEG file.

For Debian 8 "Jessie", this problem has been fixed in version
3:3.3.1-2.1+deb8u2.

We recommend that you upgrade your gthumb packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Package: gthumb
Version: 3:3.3.1-2.1+deb8u2
CVE ID: CVE-2019-20326

Topics%20covered

Topics Covered

security advisory buffer overflow Debian gthumb JPEG exploit

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here