CVE-2015-4491

Publication date 11 August 2015

Last updated 24 July 2024

Ubuntu priority

Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via crafted bitmap dimensions that are mishandled during scaling.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
firefox	15.04 vivid	Fixed 40.0+build4-0ubuntu0.15.04.1
	14.04 LTS trusty	Fixed 40.0+build4-0ubuntu0.14.04.1
	12.04 LTS precise	Fixed 40.0+build4-0ubuntu0.12.04.1
gdk-pixbuf	15.04 vivid	Fixed 2.31.3-1ubuntu0.1
	14.04 LTS trusty	Fixed 2.30.7-0ubuntu1.1
	12.04 LTS precise	Fixed 2.26.1-1ubuntu1.2
thunderbird	15.04 vivid	Fixed 1:38.2.0+build1-0ubuntu0.15.04.1
	14.04 LTS trusty	Fixed 1:38.2.0+build1-0ubuntu0.14.04.1
	12.04 LTS precise	Fixed 1:38.2.0+build1-0ubuntu0.12.04.2

Notes

mdeslaur

initial gdk-pixbuf fix was incomplete

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
gdk-pixbuf	Upstream: ?id=ffe Upstream: ?id=8db Vendor: https://www.debian.org/security/2015/dsa-3337

References

Related Ubuntu Security Notices (USN)

USN-2702-1
Firefox vulnerabilities
11 August 2015

USN-2712-1
Thunderbird vulnerabilities
25 August 2015