ISOMAN

CVE

CVE-2016-6855

Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.

Severity
HIGH
CVSS
7.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-updates/2016-09/msg00021.html
  2. http://packetstormsecurity.com/files/138486/Gnome-Eye-Of-Gnome-3.10.2-Out-Of-Bounds-Write.html
  3. http://www.securityfocus.com/bid/92616
  4. http://www.ubuntu.com/usn/USN-3069-1
  5. https://bugzilla.gnome.org/show_bug.cgi?id=770143
  6. https://git.gnome.org/browse/eog/commit/?id=e99a8c00f959652fe7c10e2fa5a3a7a5c25e6af4
  7. https://git.gnome.org/browse/eog/plain/NEWS?h=3.16.5
  8. https://git.gnome.org/browse/eog/plain/NEWS?h=3.18.3
  9. https://git.gnome.org/browse/eog/plain/NEWS?h=3.20.4
  10. https://lists.debian.org/debian-lts-announce/2020/04/msg00018.html
  11. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JVINHHR6VJKXTYYMAYKN5GROKHVT4UKB/
  12. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T6GFDHLNPUG7JHWM3QLXQNRA7NZGU2KI/
  13. https://www.exploit-db.com/exploits/40291/
  14. http://lists.opensuse.org/opensuse-updates/2016-09/msg00021.html
  15. http://packetstormsecurity.com/files/138486/Gnome-Eye-Of-Gnome-3.10.2-Out-Of-Bounds-Write.html
  16. http://www.securityfocus.com/bid/92616
  17. http://www.ubuntu.com/usn/USN-3069-1
  18. https://bugzilla.gnome.org/show_bug.cgi?id=770143
  19. https://git.gnome.org/browse/eog/commit/?id=e99a8c00f959652fe7c10e2fa5a3a7a5c25e6af4
  20. https://git.gnome.org/browse/eog/plain/NEWS?h=3.16.5