CVE-2013-7447
eog: Integer overflow in the gdk_cairo_set_source_pixbuf function ingdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, g...
CVE-2013-7447 is fixed in eog on 1 platform, first by eog 3.18.1-1ubuntu2, released December 31, 2013. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0463
91st percentile
Integer overflow in the gdk_cairo_set_source_pixbuf function ingdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog,gambas3, thunar, pinpoint, and possibly other applications, allows remoteattackers to cause a denial of service (crash) via a large image file,which triggers a large memory allocation.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| eog · Ubuntu 24.10 (oracular) | 3.18.1-1ubuntu2 | eog 3.18.1-1ubuntu2 | Dec 31, 2013 |
| eog · Ubuntu 25.04 (plucky) | 3.18.1-1ubuntu2 | eog 3.18.1-1ubuntu2 | Dec 31, 2013 |