Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 16.04 USN-3069-1 Moderate: eog Denial Of Service

ubuntu
Calendar Grey August 25, 2016
Scroller Ubuntu
The Eye of GNOME has flagged a severe vulnerability that poses risks to various versions of Ubuntu.
Eye of GNOME could be made to crash or run programs as your login if it opened a specially crafted image.

Summary

Eye of GNOME could be made to crash or run programs as your login if it

opened a specially crafted image.

Software Description:

- eog: Eye of GNOME graphics viewer program

Details:

It was discovered that Eye of GNOME incorrectly handled certain invalid

UTF-8 strings. If a user were tricked into opening a specially-crafted

image, a remote attacker could use this issue to cause Eye of GNOME to

crash, resulting in a denial of service, or possibly execute arbitrary

code.

Topics%20covered

Topics Covered

security advisory denial of service code execution Ubuntu image processing eog

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  eog                             3.18.2-1ubuntu2.1

Ubuntu 14.04 LTS:
  eog                             3.10.2-0ubuntu5.2

Ubuntu 12.04 LTS:
  eog                             3.4.2-0ubuntu1.3

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3069-1

CVE-2016-6855

Severity
important
Lowest
Low
Medium
High
Critical

August 25, 2016

Topics%20covered

Topics Covered

security advisory denial of service code execution Ubuntu image processing eog

Package Information

https://launchpad.net/ubuntu/+source/eog/3.18.2-1ubuntu2.1
https://launchpad.net/ubuntu/+source/eog/3.10.2-0ubuntu5.2
https://launchpad.net/ubuntu/+source/eog/3.4.2-0ubuntu1.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.