Vulnerabilities > Gnome > Gnome

DATE CVE VULNERABILITY TITLE RISK
2015-12-16 CVE-2015-7217 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted Truevision TGA image.
4.3
2015-12-16 CVE-2015-7216 Improper Input Validation vulnerability in multiple products
The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the JasPer decoder, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG 2000 image.
6.8
2009-04-09 CVE-2009-1276 Information Exposure vulnerability in SUN Opensolaris and Solaris
XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications.
local
low complexity
gnome sun CWE-200
2.1
2008-08-18 CVE-2008-3533 USE of Externally-Controlled Format String vulnerability in Gnome and Yelp
Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24 allows remote attackers to execute arbitrary code via format string specifiers in an invalid URI on the command line, as demonstrated by use of yelp within (1) man or (2) ghelp URI handlers in Firefox, Evolution, and unspecified other programs.
network
low complexity
gnome CWE-134
critical
10.0