Bug 574380

Summary:	media-gfx/eog: integer overflow (CVE-2013-7447)
Product:	Gentoo Security	Reporter:	Kristian Fiskerstrand (RETIRED) <k_f>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	gnome
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://bugzilla.gnome.org/show_bug.cgi?id=762028
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:	566378
Bug Blocks:	574372

Description Kristian Fiskerstrand (RETIRED) gentoo-dev

2016-02-10 21:50:14 UTC

media-gfx/eog is vulnerable to CVE-2013-7447

See tracking bug for details.

##

kflaptop eog-3.16.3 # grep -r "cairo_pixels" -- *
src/eog-print-preview.c:  guchar *cairo_pixels;
src/eog-print-preview.c:  cairo_pixels = g_malloc (height * cairo_stride);