cve/2015/CVE-2015-7674.md

CVE-2015-7674

Description

Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow.

POC

Reference

• http://www.openwall.com/lists/oss-security/2015/10/05/7
• http://www.ubuntu.com/usn/USN-2767-1

Github

No PoCs found on GitHub currently.