VDB

CVE-2013-7447

CVE-2013-7447 PUBLISHED CVSS 6.5 MEDIUM

Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, allows remote attackers to cause a denial of service (crash) via a large image file, which triggers a large memory allocation.

EPSS 4.63% · 91.4th percentile

Risk Scores

CVSS 3.0
6.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
4.63%
91.4th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSgnome-photos0, 3.18.1-1build1, 3.18.2-1
Ubuntu:18.04:LTSpinpoint0, 1:0.1.8-3
Ubuntu:14.04:LTSgtk+2.02.24.22-1ubuntu1, 0, 2.24.20-1ubuntu1
Ubuntu:24.04:LTSpinpoint0, 1:0.1.8-6build1, 1:0.1.8-6build2
Ubuntu:25.10pinpoint0, *
Ubuntu:20.04:LTSpinpoint0, 1:0.1.8-4
Ubuntu:25.10gambas33.20.4-1, 3.20.4-1build1, 3.20.2-1build1
Ubuntu:22.04:LTSpinpoint1:0.1.8-4, 0, 1:0.1.8-5
Ubuntu:16.04:LTSgambas30, 3.5.4-2ubuntu5, 3.5.4-2ubuntu11
Ubuntu:16.04:LTSeog3.18.0-1ubuntu2, 3.18.0-1ubuntu1, 3.16.3-1ubuntu2
Ubuntu:16.04:LTSthunar1.6.10-2, 1.6.11-0ubuntu0.16.04.2, 0
Ubuntu:24.04:LTSgambas33.18.3-1ubuntu1, 3.18.3-1ubuntu2, 0
Ubuntu:20.04:LTSgambas33.14.3-2ubuntu3, 3.14.3-1ubuntu1, 3.14.3-1build1
Ubuntu:16.04:LTSpinpoint0, 1:0.1.8-2, 1:0.1.6-1
Ubuntu:22.04:LTSgambas33.16.2-3build1, 0, 3.16.3-2
Ubuntu:14.04:LTSeog3.10.2-0ubuntu3, 0, 3.8.2-1ubuntu1

Timeline

  • Dec 31, 2013 CVE Published
  • Feb 4, 2022 EPSS Score
  • May 21, 2022 EPSS Score
  • Jul 13, 2022 EPSS Score
  • Oct 28, 2022 EPSS Score
  • Feb 11, 2023 EPSS Score
  • Apr 5, 2023 EPSS Score
  • May 28, 2023 EPSS Score
  • Sep 11, 2023 EPSS Score
  • Dec 26, 2023 EPSS Score
  • Apr 9, 2024 EPSS Score
  • Jun 1, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›