PT-2016-2277 · Cairo +2 · Cairo +2

Name of the Vulnerable Software and Affected Versions: cairo versions prior to 1.14.2 Description: The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash, via a negative span length. This is due to a buffer overflow in the fill...

UBUNTU-CVE-2014-5116

The cairoimagesurfacegetdata function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent attackers to cause a denial of service NULL pointer dereference via a large string...

CVE-2014-5116

The cairoimagesurfacegetdata function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent attackers to cause a denial of service NULL pointer dereference via a large string...

PT-2007-1121 · Cairo +1 · Cairo +1

Name of the Vulnerable Software and Affected Versions: Cairo versions prior to 1.4.12 Description: The issue is related to multiple integer overflows that may allow remote attackers to execute arbitrary code. This can be achieved by using a crafted PNG image with large width and height values,...