PT-2016-2277 · Cairo+2 · Cairo+2
Ilya Sakhnenko
·
Publicado
2014-10-20
·
Atualizado
2023-01-06
·
CVE-2016-3190
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
cairo versions prior to 1.14.2
Description
The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash, via a negative span length. This is due to a buffer overflow in the fill xrgb32 lerp opaque spans function.
Recommendations
For versions prior to 1.14.2, update to version 1.14.2 or later to resolve the issue. As a temporary workaround, consider restricting the input to the fill xrgb32 lerp opaque spans function to prevent negative span lengths until a patch is applied.
Exploit
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Suse
Cairo