CVE-2013-7447

Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, allows remote attackers to cause a denial of service (crash) via a large image file, which triggers a large memory allocation.

Updated gtk+2.0 packages fix security vulnerability:

Due to a logic error, an attempt to allocate a large block of memory fails in gdk_cairo_set_source_pixbuf, leading to a crash of the app that called it, for example, eom (CVE-2013-7447).

Updated eom packages fix security vulnerability:

Due to a logic error, an attempt to allocate a large block of memory fails in gdk_cairo_set_source_pixbuf, leading to a crash of eom (CVE-2013-7447).

Updated thunar packages fix security vulnerability:

Due to a logic error, an attempt to allocate a large block of memory fails in thunar_gdk_cairo_set_surface, leading to a crash of thunar (CVE-2013-7447).

Updated pinpoint packages fix security vulnerability:

Due to a logic error, an attempt to allocate a large block of memory fails in cairo_new_surface_from_pixbuf, leading to a crash of pinpoint (CVE-2013-7447).

Due to a logic error, an attempt to allocate a large block of memory fails in create_surface_from_pixbuf, leading to a crash of eog (CVE-2013-7447).

Updated gambas3 packages fix security vulnerability:

Due to a logic error, an attempt to allocate a large block of memory fails in gt_cairo_create_surface, leading to a crash of gambas3 (CVE-2013-7447).

Updated gnome-photos package fixes security vulnerabilities:

Due to a logic error, an attempt to allocate a large block of memory fails in create_surface_from_pixbuf, leading to a crash of gnome-photos (CVE-2013-7447).

A similar potential issue in view_helper_draw() in src/gegl-gtk-view-helper.c has also been patched.

These are all security issues fixed in the eog-3.20.5-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the gnome-photos-3.22.2-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the lasem-0.4.4-2.13 package on the GA media of openSUSE Tumbleweed.

This update for gtk2 fixes the following security issues:

• CVE-2016-6352: Some crashes were fixed, including a out of bounds write in the OneLine32() function that could be used by attackers to crash GTK/GDK programs.
• CVE-2013-7447: Avoid overflow when allocating a cairo pixbuf (bsc#966682).

This update for gtk2 fixes the following issues:

• CVE-2013-7447: Avoid an overflow when allocating a cairo pixbuf (bsc#966682).

It was discovered that GTK+ incorrectly handled certain large images. A remote attacker could use this issue to cause GTK+ applications to crash, resulting in a denial of service, or possibly execute arbitrary code.

It was discovered that Eye of GNOME incorrectly handled certain large images. If a user were tricked into opening a specially-crafted image, a remote attacker could use this issue to cause Eye of GNOME to crash, resulting in a denial of service, or possibly execute arbitrary code.