Vulnerability DatabaseCVE-2015-7674
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2015-7674
Published:October 26, 2015
Updated:May 17, 2026
Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow.
Related Resources (14)
http://www.debian.org/security/2015/dsa-3378
http://lists.opensuse.org/opensuse-updates/2016-06/msg00006.html
http://www.openwall.com/lists/oss-security/2015/10/02/10
https://access.redhat.com/security/cve/CVE-2015-7674
https://security.gentoo.org/glsa/201512-05
http://www.openwall.com/lists/oss-security/2015/10/05/7
http://www.ubuntu.com/usn/USN-2767-1
https://git.gnome.org/browse/gdk-pixbuf/commit/?id=e9a5704edaa9aee9498f1fbf6e1b70fcce2e55aa
http://www.openwall.com/lists/oss-security/2015/10/01/7
http://www.securityfocus.com/bid/76955
https://security-tracker.debian.org/tracker/CVE-2015-7674
http://www.openwall.com/lists/oss-security/2015/10/01/4
http://ftp.gnome.org/pub/gnome/sources/gdk-pixbuf/2.32/gdk-pixbuf-2.32.1.news
http://lists.opensuse.org/opensuse-updates/2016-03/msg00124.html
Do you need more information?
Contact Us
CVSS v3
Base Score:
5.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW
CVSS v2
Base Score:
6.8
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
EPSS
Base Score:
0.98