Lucene search

K
cveMitreCVE-2014-5116
HistoryJul 29, 2014 - 2:55 p.m.

CVE-2014-5116

2014-07-2914:55:08
mitre
web.nvd.nist.gov
22
cve-2014-5116
cairo
image surface
gtk+
wireshark
denial of service
null pointer dereference

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.6

Confidence

High

EPSS

0.044

Percentile

92.5%

The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a large string.

Affected configurations

Nvd
Node
cairographicscairoMatch1.10.2
VendorProductVersionCPE
cairographicscairo1.10.2cpe:2.3:a:cairographics:cairo:1.10.2:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.6

Confidence

High

EPSS

0.044

Percentile

92.5%