CVE-2016-6855
Eye of Gnome 3.10.2 - GMarkup Out of Bounds Write
Severity Score
7.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.
Eye of GNOME (también conocido como eog) 3.16.5, 3.17.x, 3.18.x en versiones anteriores a 3.18.3, 3.19.x y 3.20.x en versiones anteriores a 3.20.4, cuando es utilizado con glib en versiones anteriores a 2.44.1, permiten a atacantes remotos provocar una denegación de servicio (escritura fuera de límites y caída) a través de vectores que involucran paso UTF-8 inválido para GMarkup.
Gnome Eye of Gnome version 3.10.2 suffers from an out-of-bounds write vulnerability.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2016-08-18 CVE Reserved
- 2016-08-23 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-787: Out-of-bounds Write
CAPEC
References (13)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/92616 | Third Party Advisory | |
| https://bugzilla.gnome.org/show_bug.cgi?id=770143 | Issue Tracking | |
| https://git.gnome.org/browse/eog/plain/NEWS?h=3.16.5 | Release Notes | |
| https://git.gnome.org/browse/eog/plain/NEWS?h=3.18.3 | Release Notes | |
| https://git.gnome.org/browse/eog/plain/NEWS?h=3.20.4 | Release Notes | |
| https://lists.debian.org/debian-lts-announce/2020/04/msg00018.html | Mailing List |
|
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/40291 | 2024-08-06 | |
| http://packetstormsecurity.com/files/138486/Gnome-Eye-Of-Gnome-3.10.2-Out-Of-Bounds-Write.html | 2024-08-06 |
| URL | Date | SRC |
|---|---|---|
| https://git.gnome.org/browse/eog/commit/?id=e99a8c00f959652fe7c10e2fa5a3a7a5c25e6af4 | 2023-11-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.16.5 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.16.5" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.17.1 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.17.1" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.17.2 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.17.2" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.17.3 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.17.3" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.17.90 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.17.90" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.17.91 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.17.91" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.17.92 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.17.92" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.18.0 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.18.0" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.18.1 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.18.1" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.18.2 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.18.2" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.19.1 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.19.1" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.19.2 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.19.2" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.19.3 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.19.3" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.19.4 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.19.4" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.19.90 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.19.90" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.19.91 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.19.91" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.19.92 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.19.92" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.20.0 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.20.0" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.20.1 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.20.1" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.20.2 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.20.2" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Gnome Search vendor "Gnome" | Eye Of Gnome Search vendor "Gnome" for product "Eye Of Gnome" | 3.20.3 Search vendor "Gnome" for product "Eye Of Gnome" and version "3.20.3" | - |
Affected
| in | Gnome Search vendor "Gnome" | Glib Search vendor "Gnome" for product "Glib" | 2.44.0 Search vendor "Gnome" for product "Glib" and version "2.44.0" | - |
Safe
|
| Fedoraproject Search vendor "Fedoraproject" | Fedora Search vendor "Fedoraproject" for product "Fedora" | 23 Search vendor "Fedoraproject" for product "Fedora" and version "23" | - |
Affected
| ||||||
| Fedoraproject Search vendor "Fedoraproject" | Fedora Search vendor "Fedoraproject" for product "Fedora" | 24 Search vendor "Fedoraproject" for product "Fedora" and version "24" | - |
Affected
| ||||||
| Opensuse Search vendor "Opensuse" | Leap Search vendor "Opensuse" for product "Leap" | 42.1 Search vendor "Opensuse" for product "Leap" and version "42.1" | - |
Affected
| ||||||
| Opensuse Search vendor "Opensuse" | Opensuse Search vendor "Opensuse" for product "Opensuse" | 13.2 Search vendor "Opensuse" for product "Opensuse" and version "13.2" | - |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 12.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "12.04" | lts |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 14.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "14.04" | lts |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 16.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "16.04" | lts |
Affected
| ||||||