Search CVE reports
1 – 6 of 6 results
A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata, the application fails to validate chunk boundaries while searching for a null terminator. An attacker could...
1 affected package
eog
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| eog | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user...
1 affected package
eog
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| eog | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode.
1 affected package
geographiclib
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| geographiclib | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors...
1 affected package
eog
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| eog | — | — | — | — | — |
Some fixes available 29 of 87
Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, allows remote attackers to cause a...
8 affected packages
gtk+2.0, gtk+3.0, eom, gambas3, thunar...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gtk+2.0 | Not affected | Not affected | Not affected | Not affected | Not affected |
| gtk+3.0 | Not affected | Not affected | Not affected | Not affected | Not affected |
| eom | Not affected | Not affected | Not affected | Not affected | Not affected |
| gambas3 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Not in release |
| thunar | Not affected | Not affected | Not affected | Not affected | Not affected |
| gnome-photos | Not in release | Not in release | Not affected | Not affected | Not affected |
| pinpoint | Not in release | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| eog | Fixed | Fixed | Fixed | Fixed | Fixed |
Untrusted search path vulnerability in the Python interface in Eye of GNOME (eog) 2.22.3, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory,...
1 affected package
eog
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| eog | — | — | — | — | — |