CVE-2016-6855 PUBLISHED

Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.

EPSS 4.04% · 88.4th percentile

Risk Scores

EPSS Score
4.04%
88.4th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSeog3.18.2-1ubuntu2, 0, 3.16.3-1ubuntu2
Ubuntu:14.04:LTSeog3.8.2-1ubuntu1, 3.10.1-1ubuntu1, 3.10.2-0ubuntu1

Timeline

References

Open in Interactive Console →