PublicDateAtUSN: 2015-08-11
Candidate: CVE-2015-4491
PublicDate: 2015-08-16 01:59:00 UTC
References: 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4491
 https://www.mozilla.org/en-US/security/advisories/mfsa2015-88/
 https://ubuntu.com/security/notices/USN-2702-1
 https://ubuntu.com/security/notices/USN-2712-1
 https://ubuntu.com/security/notices/USN-2722-1
Description:
 Integer overflow in the make_filter_table function in pixops/pixops.c in
 gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and
 Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other
 products, allows remote attackers to execute arbitrary code or cause a
 denial of service (heap-based buffer overflow and application crash) via
 crafted bitmap dimensions that are mishandled during scaling.
Ubuntu-Description: 
Notes: 
 mdeslaur> initial gdk-pixbuf fix was incomplete
Bugs: 
 https://bugzilla.gnome.org/show_bug.cgi?id=752297
Priority: medium
Discovered-by: Gustavo Grieco
Assigned-to: chrisccoulson
CVSS: 

Patches_firefox: 
upstream_firefox: released (40.0)
precise_firefox: released (40.0+build4-0ubuntu0.12.04.1)
trusty_firefox: released (40.0+build4-0ubuntu0.14.04.1)
trusty/esm_firefox: DNE (trusty was released [40.0+build4-0ubuntu0.14.04.1])
vivid_firefox: released (40.0+build4-0ubuntu0.15.04.1)
devel_firefox: released (40.0+build4-0ubuntu1)

Patches_thunderbird:
upstream_thunderbird: released (38.2.0)
precise_thunderbird: released (1:38.2.0+build1-0ubuntu0.12.04.2)
trusty_thunderbird: released (1:38.2.0+build1-0ubuntu0.14.04.1)
trusty/esm_thunderbird: DNE (trusty was released [1:38.2.0+build1-0ubuntu0.14.04.1])
vivid_thunderbird: released (1:38.2.0+build1-0ubuntu0.15.04.1)
devel_thunderbird: released (1:38.2.0+build1-0ubuntu1)

Patches_gdk-pixbuf:
 upstream: https://git.gnome.org/browse/gdk-pixbuf/commit/?id=ffec86ed5010c5a2be14f47b33bcf4ed3169a199
 upstream: https://git.gnome.org/browse/gdk-pixbuf/commit/?id=8dba67cb4f38d62a47757741ad41e3f245b4a32a
 vendor: https://www.debian.org/security/2015/dsa-3337
upstream_gdk-pixbuf: needed
precise_gdk-pixbuf: released (2.26.1-1ubuntu1.2)
trusty_gdk-pixbuf: released (2.30.7-0ubuntu1.1)
trusty/esm_gdk-pixbuf: DNE (trusty was released [2.30.7-0ubuntu1.1])
vivid_gdk-pixbuf: released (2.31.3-1ubuntu0.1)
devel_gdk-pixbuf: released (2.31.5-1ubuntu1)
vivid/stable-phone-overlay_gdk-pixbuf: released (2.31.3-1ubuntu0.1)
vivid/ubuntu-core_gdk-pixbuf: DNE