CVE-2015-7217

EUVD-2015-7149
The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted Truevision TGA image.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
Affected Products (NVD)
VendorProductVersion
mozillafirefox
𝑥
≤ 42.0
opensuseleap
42.1
opensuseopensuse
13.1
opensuseopensuse
13.2
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
precise
Fixed 43.0+build1-0ubuntu0.12.04.1
released
trusty
Fixed 43.0+build1-0ubuntu0.14.04.1
released
vivid
Fixed 43.0+build1-0ubuntu0.15.04.1
released
wily
Fixed 43.0+build1-0ubuntu0.15.10.1
released