NetSight
IP …
high7.5Public exploit code

CVE-2016-6855

Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cau…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.

Affected products

VendorProductAffected versions
FedoraprojectFedora
Versions 23, 24
OpensuseLeap
Version 42.1
OpensuseOpensuse
Version 13.2
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04
GnomeEye Of Gnome
Versions 3.16.5, 3.17.1, 3.17.2, 3.17.3, 3.17.90, 3.17.91

Weakness classification

CWE-787

References