PT-2015-7886 · Gnome · Librsvg

Published 2015-03-08 · Updated 2015-03-08

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions librsvg (affected versions not specified)

Description The issue concerns several problems found in librsvg through fuzz testing by Atte Kettunen, including invalid memory access due to incorrect handling of a pattern paint server, an infinite loop in gradient handling, a heap-buffer-overflow caused by a missing point in a point-list, out of bounds memory access when clipping, and an integer overflow in the convolution matrix filter code. Additionally, there was an issue with a double g free() when processing stroke-dasharray.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2015-0100

Affected Products

Librsvg

References · 8

• https://advisories.mageia.org/MGASA-2015-0100.html · Security Note
• https://osv.dev/vulnerability/MGASA-2015-0100 · Vendor Advisory
• https://bugzilla.gnome.org/show_bug.cgi?id=744299 · Note
• https://git.gnome.org/browse/librsvg/commit/?id=53c50caecc970aef91cf8e3f1fde919f848d6f0c · Note
• https://bugzilla.gnome.org/show_bug.cgi?id=738169 · Note
• https://bugzilla.gnome.org/show_bug.cgi?id=738050 · Note
• https://bugs.mageia.org/show_bug.cgi?id=15303 · Note
• https://bugzilla.gnome.org/show_bug.cgi?id=703102 · Note