Summary
It was discovered that Eye of GNOME incorrectly handled certain invalid
UTF-8 strings. If a user were tricked into opening a specially-crafted
image, a remote attacker could use this issue to cause Eye of GNOME to
crash, resulting in a denial of service, or possibly execute arbitrary
code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | eog | 3.10.2-0ubuntu5.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | eog | 3.18.2-1ubuntu2.1 |
Vulnerabilities 1
-
Unscored —
Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib befo…
References
-
report
https://ubuntu.com/security/CVE-2016-6855