Package: gdk-pixbuf
Severity: important
Tags: security

gdk-pixbuf is vulnerable to CAN-2005-0891:

  Matthias Clasen discovered a Denial of Service vulnerability in the
  BMP image module of gdk. Processing a specially crafted BMP image with
  an application using gdk-pixbuf caused an allocated memory block to be
  free()'ed twice, leading to a crash of the application.  However, it
  is believed that this cannot be exploited to execute arbitrary
  attacker provided code.

Ubuntu has a patch for it here:
http://people.ubuntu.com/~scott/patches/gdk-pixbuf/gdk-pixbuf_0.22.0-7ubuntu2.patch

-- 
see shy jo

Attachment: signature.asc
Description: Digital signature

Reply via email to