CVE:CVE-2018-10767
CNNVD:CNNVD-201805-153
libgxps是一个基于GObject（一种基于C语言的框架）的用于处理XPS文档的库。
libgxps 0.3.0及之前版本中的gxps-images.c文件的‘gxps_images_guess_content_type’函数的Glib调用存在缓冲区错误漏洞，该漏洞源于程序接收了来自g_input_stream_read调用的负的返回值。远程攻击者可借助特制的输入利用该漏洞造成拒绝服务。
solution:Upgrade gnome libgxps to a higher version than 0.3.0,and avoid the version (,0.3.0]; Upgrade redhat ansible_tower to a higher version than 3.3,and avoid the version 3.3; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0