CVE-2013-7447
CVE-2013-7447
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, allows remote attackers to cause a denial of service (crash) via a large image file, which triggers a large memory allocation.
CVSS 6.5 · Medium · EPSS 4.6% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
gtk+2.0 Debian:12
- Affected ranges
- ECOSYSTEM: < 2.24.30-1.1
Update to 2.24.30-1.1
gtk+2.0 Debian:13
- Affected ranges
- ECOSYSTEM: < 2.24.30-1.1
Update to 2.24.30-1.1
gtk+2.0 Debian:14
- Affected ranges
- ECOSYSTEM: < 2.24.30-1.1
Update to 2.24.30-1.1
gtk+3.0 Debian:12
- Affected ranges
- ECOSYSTEM: < 3.10.7-1
Update to 3.10.7-1
gtk+3.0 Debian:13
- Affected ranges
- ECOSYSTEM: < 3.10.7-1
Update to 3.10.7-1
gtk+3.0 Debian:14
- Affected ranges
- ECOSYSTEM: < 3.10.7-1
Update to 3.10.7-1
eog Ubuntu:14.04:LTS
- Versions
- 3.8.2-1ubuntu1
- 3.10.1-1ubuntu1
- 3.10.2-0ubuntu1
- 3.10.2-0ubuntu2
- 3.10.2-0ubuntu3
- 3.10.2-0ubuntu4
- 3.10.2-0ubuntu5
- Affected ranges
- ECOSYSTEM: < 3.10.2-0ubuntu5.1
Update to 3.10.2-0ubuntu5.1
gtk+2.0 Ubuntu:14.04:LTS
- Versions
- 2.24.20-1ubuntu1
- 2.24.21-1ubuntu1
- 2.24.22-1ubuntu1
- 2.24.22-1ubuntu2
- 2.24.23-0ubuntu1
- 2.24.23-0ubuntu1.1
- 2.24.23-0ubuntu1.2
- 2.24.23-0ubuntu1.3
- Affected ranges
- ECOSYSTEM: < 2.24.23-0ubuntu1.4
Update to 2.24.23-0ubuntu1.4
eog Ubuntu:16.04:LTS
- Versions
- 3.16.3-1ubuntu2
- 3.18.0-0ubuntu1
- 3.18.0-1ubuntu1
- 3.18.0-1ubuntu2
- 3.18.1-1ubuntu1
- Affected ranges
- ECOSYSTEM: < 3.18.1-1ubuntu2
Update to 3.18.1-1ubuntu2
gambas3 Ubuntu:16.04:LTS
- Versions
- 3.5.4-2ubuntu5
- 3.5.4-2ubuntu7
- 3.5.4-2ubuntu11
- 3.8.4-2ubuntu1
- 3.8.4-2ubuntu2
- 3.8.4-2ubuntu3
- 3.8.4-2ubuntu3.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
gnome-photos Ubuntu:16.04:LTS
- Versions
- 3.16.2-1
- 3.18.1-1
- 3.18.1-1build1
- 3.18.2-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pinpoint Ubuntu:16.04:LTS
- Versions
- 1:0.1.6-1
- 1:0.1.8-1ubuntu2
- 1:0.1.8-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
thunar Ubuntu:16.04:LTS
- Versions
- 1.6.10-1
- 1.6.10-2
- 1.6.10-2ubuntu1
- 1.6.11-0ubuntu0.16.04.1
- 1.6.11-0ubuntu0.16.04.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pinpoint Ubuntu:18.04:LTS
- Versions
- 1:0.1.8-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
gambas3 Ubuntu:20.04:LTS
- Versions
- 3.13.0-1ubuntu2
- 3.14.3-1
- 3.14.3-1build1
- 3.14.3-1ubuntu1
- 3.14.3-2ubuntu1
- 3.14.3-2ubuntu3
- 3.14.3-2ubuntu3.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pinpoint Ubuntu:20.04:LTS
- Versions
- 1:0.1.8-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
gambas3 Ubuntu:22.04:LTS
- Versions
- 3.16.2-3build1
- 3.16.3-2
- 3.16.3-2build1
- 3.16.3-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pinpoint Ubuntu:22.04:LTS
- Versions
- 1:0.1.8-4
- 1:0.1.8-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
gambas3 Ubuntu:24.04:LTS
- Versions
- 3.18.3-1ubuntu1
- 3.18.3-1ubuntu2
- 3.18.4-3ubuntu1
- 3.19.0-2ubuntu1
- 3.19.0-2ubuntu9
- 3.19.0-2ubuntu10
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pinpoint Ubuntu:24.04:LTS
- Versions
- 1:0.1.8-6
- 1:0.1.8-6build1
- 1:0.1.8-6build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
gambas3 Ubuntu:25.10
- Versions
- 3.20.2-1build1
- 3.20.2-1build2
- 3.20.2-2ubuntu3
- 3.20.4-1
- 3.20.4-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pinpoint Ubuntu:25.10
- Versions
- 1:0.1.8-6build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
gambas3 Ubuntu:26.10
- Versions
- 3.20.4-1ubuntu1
- 3.20.4-2
- 3.22.0-1
- 3.22.0-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://github.com/mate-desktop/eom/issues/93
- http://www.ubuntu.com/usn/USN-2898-2
- http://www.openwall.com/lists/oss-security/2016/02/10/6
- http://www.ubuntu.com/usn/USN-2898-1
- https://bugs.launchpad.net/ubuntu/+source/gtk+2.0/+bug/1540811
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
- http://lists.opensuse.org/opensuse-updates/2016-03/msg00010.html
- https://git.gnome.org/browse/gtk+/tree/NEWS
- http://www.securityfocus.com/bid/83239
- http://www.openwall.com/lists/oss-security/2016/02/10/2
- https://bugzilla.gnome.org/show_bug.cgi?id=703220
- https://git.gnome.org/browse/gtk+/commit?id=894b1ae76a32720f4bb3d39cf460402e3ce331d6
- https://nvd.nist.gov/vuln/detail/CVE-2013-7447