Vulnetix
Try Vulnetix Request Demo
CVE-2012-2370 PUBLISHED CVSS 5 MEDIUM

Multiple integer overflows in the read_bitmap_file_data function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service (application crash) via a negative (1) height or (2) width in an XBM file, which triggers a heap-based buffer overflow.

EPSS 2.27% · 84.5th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
2.27%
84.5th percentile

Affected Products

VendorProductVersions
n/an/an/a
gnomegdk-pixbuf0, 2.23.3, 2.23.4

Timeline

References

Open in Interactive Console →