Home > Vulnerability Database > CVE-2015-4491

Mend.io Vulnerability Database

CVE-2015-4491

Date: August 15, 2015

Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via crafted bitmap dimensions that are mishandled during scaling.

Language: C

Severity Score

5.6

Related Resources (37)

Url: http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

Url: http://lists.opensuse.org/opensuse-updates/2015-08/msg00030.html

Url: http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165701.html

Url: http://www.debian.org/security/2015/dsa-3337

Url: http://www.ubuntu.com/usn/USN-2702-3

Url: http://rhn.redhat.com/errata/RHSA-2015-1586.html

Url: http://www.ubuntu.com/usn/USN-2702-2

Url: http://www.ubuntu.com/usn/USN-2702-1

Url: http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html

Url: http://www.ubuntu.com/usn/USN-2722-1

Url: https://security-tracker.debian.org/tracker/CVE-2015-4491

Url: http://lists.opensuse.org/opensuse-updates/2015-08/msg00031.html

Url: http://lists.opensuse.org/opensuse-updates/2015-09/msg00002.html

Url: http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html

Url: http://rhn.redhat.com/errata/RHSA-2015-1694.html

Url: https://security.gentoo.org/glsa/201605-06

Url: http://www.securitytracker.com/id/1033247

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2015-4491

Url: http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165732.html

Url: http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html

Url: https://security.gentoo.org/glsa/201512-05

Url: https://bugzilla.redhat.com/show_bug.cgi?id=1252290

Url: http://rhn.redhat.com/errata/RHSA-2015-1682.html

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=1184009

Url: https://bugzilla.gnome.org/show_bug.cgi?id=752297

Url: https://access.redhat.com/security/cve/CVE-2015-4491

Url: http://www.mozilla.org/security/announce/2015/mfsa2015-88.html

Url: http://www.ubuntu.com/usn/USN-2712-1

Url: http://www.securitytracker.com/id/1033372

Url: http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165730.html

Url: https://git.gnome.org/browse/gdk-pixbuf/commit/?id=ffec86ed5010c5a2be14f47b33bcf4ed3169a199

Url: http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2015-4491

Url: http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html

Url: http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165703.html

Url: http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Url: https://www.mend.io/vulnerability-database/CVE-2015-4491

Severity Score

5.6

Weakness Type (CWE)

Numeric Errors

CWE-189

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	6.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2015-4491

Date: August 15, 2015

Language: C

Severity Score

Related Resources (37)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?