PT-2015-7886 · Gnome · Librsvg

Publicado 2015-03-08 · Atualizado 2015-03-08

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions librsvg (affected versions not specified)

Description The issue concerns several problems found in librsvg through fuzz testing by Atte Kettunen, including invalid memory access due to incorrect handling of a pattern paint server, an infinite loop in gradient handling, a heap-buffer-overflow caused by a missing point in a point-list, out of bounds memory access when clipping, and an integer overflow in the convolution matrix filter code. Additionally, there was an issue with a double g free() when processing stroke-dasharray.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2015-0100

Produtos afetados

Librsvg

Referências · 8

• https://bugzilla.gnome.org/show_bug.cgi?id=744299 · Nota
• https://git.gnome.org/browse/librsvg/commit/?id=53c50caecc970aef91cf8e3f1fde919f848d6f0c · Nota
• https://bugzilla.gnome.org/show_bug.cgi?id=738169 · Nota
• https://bugzilla.gnome.org/show_bug.cgi?id=738050 · Nota
• https://advisories.mageia.org/MGASA-2015-0100.html · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2015-0100 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=15303 · Nota
• https://bugzilla.gnome.org/show_bug.cgi?id=703102 · Nota