There is a stack-based buffer over-read in calling GLib in the function gxpsimagesguesscontenttype of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a ginputstream_read call. A crafted input will lead to a remote denial of service attack.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "0.3.1-1", "binary_name": "gir1.2-gxps-0.1" }, { "binary_version": "0.3.1-1", "binary_name": "libgxps-dev" }, { "binary_version": "0.3.1-1", "binary_name": "libgxps-doc" }, { "binary_version": "0.3.1-1", "binary_name": "libgxps-utils" }, { "binary_version": "0.3.1-1", "binary_name": "libgxps-utils-dbgsym" }, { "binary_version": "0.3.1-1", "binary_name": "libgxps2" }, { "binary_version": "0.3.1-1", "binary_name": "libgxps2-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "0.3.2-2", "binary_name": "gir1.2-gxps-0.1" }, { "binary_version": "0.3.2-2", "binary_name": "libgxps-dev" }, { "binary_version": "0.3.2-2", "binary_name": "libgxps-doc" }, { "binary_version": "0.3.2-2", "binary_name": "libgxps-utils" }, { "binary_version": "0.3.2-2", "binary_name": "libgxps-utils-dbgsym" }, { "binary_version": "0.3.2-2", "binary_name": "libgxps2" }, { "binary_version": "0.3.2-2", "binary_name": "libgxps2-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "0.3.2-4build3", "binary_name": "gir1.2-gxps-0.1" }, { "binary_version": "0.3.2-4build3", "binary_name": "libgxps-dev" }, { "binary_version": "0.3.2-4build3", "binary_name": "libgxps-doc" }, { "binary_version": "0.3.2-4build3", "binary_name": "libgxps-utils" }, { "binary_version": "0.3.2-4build3", "binary_name": "libgxps-utils-dbgsym" }, { "binary_version": "0.3.2-4build3", "binary_name": "libgxps2t64" }, { "binary_version": "0.3.2-4build3", "binary_name": "libgxps2t64-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "0.3.2-4build3", "binary_name": "gir1.2-gxps-0.1" }, { "binary_version": "0.3.2-4build3", "binary_name": "libgxps-dev" }, { "binary_version": "0.3.2-4build3", "binary_name": "libgxps-doc" }, { "binary_version": "0.3.2-4build3", "binary_name": "libgxps-utils" }, { "binary_version": "0.3.2-4build3", "binary_name": "libgxps-utils-dbgsym" }, { "binary_version": "0.3.2-4build3", "binary_name": "libgxps2t64" }, { "binary_version": "0.3.2-4build3", "binary_name": "libgxps2t64-dbgsym" } ] }